Skip to content
OpenAdvisories
Critical · 9.3 CVE-2024-54234 EUVD-2024-52360GHSA-q24w-35fr-jmr7

WordPress Limit Login Attempts plugin <= 5.5 - SQL Injection vulnerability

Published Dec 13, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wp-buy Limit Login Attempts wp-limit-failed-login-attempts allows SQL Injection.This issue affects Limit Login Attempts: from n/a through <= 5.5.

Affected products

VendorProductAffectedFixed
wp-buy Limit Login Attempts ≤ 5.5 —

References