Skip to content
OpenAdvisories

Vendor

wp-buy

27 known vulnerabilities.

2 results · Clear filters · Feed

  • Critical 9.3

    WordPress Limit Login Attempts plugin <= 5.5 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wp-buy Limit Login Attempts wp-limit-failed-login-attempts allows SQL Injection.This issue affects Limit Login Attempts: from n/a through <= 5.5.

  • Critical 9.8

    WordPress Login as User or Customer plugin <= 3.8 - Unauthenticated Account Takeover vulnerability

    Improper Authentication vulnerability in wp-buy Login as User or Customer (User Switching) allows Privilege Escalation.This issue affects Login as User or Customer (User Switching): from n/a through 3.8.