Gunkastudios Login Block Ips
2 CVEs affecting Gunkastudios Login Block Ips. Latest disclosed: 2022-11-21. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-1579 | High | 7.5 | 2022-11-21 | The function check_is_login_page() uses headers for the IP check, which can be easily spoofed. |
CVE-2022-3098 | Medium | 4.3 | 2022-09-26 | The Login Block IPs WordPress plugin through 1.0.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged i… |