Skip to contentUnknown Limit Login Attempts vulnerabilities
- unknown limit login attempts securityLimit Login Attempts Reloaded < 3.4.2 - Admin+ SSRF via App Setup CodeCVE-2026-1184394.1 Medium
- unknown limit login attempts securityLimit Login Attempts Reloaded < 3.4.1 - Two-Factor Authentication Bypass via Malformed X-Forwarded-For HeaderCVE-2026-1182027.5 High
- unknown limit login attempts securityLimit Login Attempts Reloaded 3.0.0 - 3.4.0 - Two-Factor Authentication Bypass via XML-RPCCVE-2026-1182017.5 High
- unknown limit login attempts securityLimit Login Attempts Reloaded < 3.3.5 - Username Denylist Bypass via Case Variant and Account EmailCVE-2026-183563.7 Low
- limitloginattempts limit login attempts reloadedLimit Login Attempts Reloaded < 2.25.26 - Admin+ Missing Authorization to Toggle Plugin Auto-UpdateCVE-2023-55254.3 Medium
- automattic limit login attempts, limit login attempts project login attempts +1 moreLimit Login Attempts < 1.7.2 - Subscriber+ Stored XSSCVE-2023-1861EPSS 28.8%5.4 Medium
- ciphercoin wp limit login attemptsWP Limit Login Attempts <= 2.6.4 - IP SpoofingCVE-2022-43037.5 High
- automattic limit login attemptsLimit Login Attempts < 4.0.72 - Admin+ Stored Cross-Site ScriptingCVE-2022-10294.8 Medium
- limit login attempts project login attempts, unknown limit login attempts (spam protection) +1 moreLimit Login Attempts (Spam Protection) < 5.1 - Unauthenticated SQLiCVE-2022-07879.8 Critical
- automattic limit login attempts, limit login attempts project login attempts +1 moreLimit Login Attempts < 4.0.50 - Unauthenticated Stored Cross-Site ScriptingCVE-2021-246576.1 Medium