Medium 5.4
2024-12-21< 2.25.27
WordPress Limit Login Attempts Reloaded Plugin <= 2.25.26 is vulnerable to Cross Site Scripting (XSS)
Minimum safe version
2.25.27
Update to 2.25.27 or later to address 6 fixable vulnerabilities
WordPress Limit Login Attempts Reloaded Plugin <= 2.25.26 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-5525
WordPress Limit Login Attempts Reloaded plugin <= 2.17.3 - Login Rate Limiting Bypass vulnerability
WordPress Limit Login Attempts Reloaded plugin <= 2.15.2 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability
CVE-2020-35590
CVE-2020-35589