Wpdo Dologin Security
3 CVEs affecting Wpdo Dologin Security. Latest disclosed: 2023-10-16. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-4800 | Medium | 6.5 | 2023-10-16 | The DoLogin Security WordPress plugin before 3.7.1 does not restrict the access of a widget that shows the IPs of failed logins to low privileged users. |
CVE-2023-4549 | Medium | 6.1 | 2023-09-25 | The DoLogin Security WordPress plugin before 3.7 does not properly sanitize IP addresses coming from the X-Forwarded-For header, which can be used by attackers… |
CVE-2023-4631 | Medium | 5.3 | 2023-09-25 | The DoLogin Security WordPress plugin before 3.7 uses headers such as the X-Forwarded-For to retrieve the IP address of the request, which could lead to IP spo… |