Skip to content

Known CVE

Limit Login Attempts - Stored Cross-Site Scripting

Limit Login Attempts WordPress plugin < 4.0.72 contains a stored cross-site scripting caused by unsanitized and unescaped settings, letting malicious administrators inject Javascript code, exploit requires administrator privileges.

CVE-2022-1029

Medium2022CVSS 4.8CWE-79

cve2022 · wordpress · wp · wp-plugin · miniorange-limit-login-attempts · xss · authenticated

Verified scans run this check after you prove you own the site.

All known CVEsView the checks catalogNational Vulnerability Database

Scan a website