Loginizer

8 CVEs across 1 Loginizer products. Browse Loginizer vulnerabilities, severities, and proof-of-concept exploits.

Loginizer products with known CVEs

Product	CVEs
Loginizer	8

Loginizer CVEs — newest first
CVE	Severity	Score	Published	Summary
`CVE-2024-10097`	High	`8.1`	2024-11-05	The Loginizer Security and Loginizer plugins for WordPress are vulnerable to authentication bypass in all versions up to, and including, 1.9.2. This is due to…
`CVE-2023-2296`	Medium	`6.1`	2023-05-30	The Loginizer WordPress plugin before 1.7.9 does not escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting whic…
`CVE-2022-45079`	Medium	`4.7`	2023-05-22	Cross-Site Request Forgery (CSRF) vulnerability in Softaculous Loginizer plugin <= 1.7.5 versions.
`CVE-2022-45084`	Medium	`6.3`	2023-04-24	Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Softaculous Loginizer plugin <= 1.7.5 versions.
`CVE-2020-27615`	Critical	`9.8`	2020-10-21	The Loginizer plugin before 1.6.4 for WordPress allows SQL injection (with resultant XSS), related to loginizer_login_failed and lz_valid_ip.
`CVE-2018-11366`	Medium	`6.1`	2018-05-22	init.php in the Loginizer plugin 1.3.8 through 1.3.9 for WordPress has Unauthenticated Stored Cross-Site Scripting (XSS) because logging is mishandled. This is…
`CVE-2017-12651`	High	`8.8`	2017-08-07	Cross Site Request Forgery (CSRF) exists in the Blacklist and Whitelist IP Wizard in init.php in the Loginizer plugin before 1.3.6 for WordPress because the HT…
`CVE-2017-12650`	Critical	`9.8`	2017-08-07	SQL Injection exists in the Loginizer plugin before 1.3.6 for WordPress via the X-Forwarded-For HTTP header.