Skip to content
OpenAdvisories
High · 7.6 CVE-2023-48764 EUVD-2023-52797GHSA-29xm-2gqv-p5cq

WordPress WordPress Brute Force Protection – Stop Brute Force Attacks Plugin <= 2.2.5 is vulnerable to SQL Injection

Published Dec 19, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in GuardGiant Brute Force Protection WordPress Brute Force Protection – Stop Brute Force Attacks.This issue affects WordPress Brute Force Protection – Stop Brute Force Attacks: from n/a through 2.2.5.

Affected products

VendorProductAffectedFixed
GuardGiant Brute Force Protection WordPress Brute Force Protection – Stop Brute Force Attacks ≤ 2.2.5 —

References