Skip to content
OpenAdvisories

Product · webfactory

Login Lockdown & Protection

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.3
    CVE-2025-11707

    Login Lockdown & Protection <= 2.14 - IP Block Bypass

    The Login Lockdown & Protection plugin for WordPress is vulnerable to IP Block Bypass in all versions up to, and including, 2.14. This is due to $unblock_key key being insufficiently random allowing unauthenticated users, with access to an administrative user…

    webfactory Login Lockdown & Protection Web / CMS
  • Medium 5.4
    CVE-2025-3766

    Login Lockdown & Protection <= 2.11 - Missing Authorization to Authenticated (Subscriber+) Arbitrary IP Whitelisting

    The Login Lockdown & Protection plugin for WordPress is vulnerable to unauthorized nonce access due to a missing capability check on the ajax_run_tool function in all versions up to, and including, 2.11. This makes it possible for authenticated attackers, wit…

    webfactory Login Lockdown & Protection Web / CMS
  • Medium 5.4
    CVE-2024-1340

    Login Lockdown – Protect Login Form <= 2.08 - Missing Authorization

    The Login Lockdown – Protect Login Form plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the generate_export_file function in all versions up to, and including, 2.08. This makes it possible for authenticat…

    webfactory Login Lockdown & Protection Web / CMS