Security Advisory

CVE-2022-0787

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-03-28 17:23:23
Last updated 2024-08-02 23:40:04
Assigner WPScan
State PUBLISHED

Description

The Limit Login Attempts (Spam Protection) WordPress plugin before 5.1 does not sanitise and escape some parameters before using them in SQL statements via AJAX actions (available to unauthenticated users), leading to SQL Injections