Login Request a demo
LO
Product
Loginizer
by Loginizer · last CVE Nov 5, 2024
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 2High 3Medium 3Low 0
Severity
All severities8Critical2High3Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Loginizer to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-27615
9.8
54%
Oct 21
The Loginizer plugin before 1.6.4 for WordPress allows SQL injection (with resultant XSS), related to loginizer_login_failed and lz_valid_ip
Affected: before 1.6.4
CVE-2017-12650
9.8
2%
Aug 7
SQL Injection exists in the Loginizer plugin before 1.3.6 for WordPress via the X-Forwarded-For HTTP header
Affected: through 1.3.5
CVE-2022-45079
8.8
0%
May 22
Cross-Site Request Forgery (CSRF) vulnerability in Softaculous Loginizer plugin <= 1.7.5 versions
Affected: before 1.7.6
CVE-2017-12651
8.8
1%
Aug 7
Cross Site Request Forgery (CSRF) exists in the Blacklist and Whitelist IP Wizard in init.php in the Loginizer plugin before 1.3.6 for WordPress because the HTTP Referer header is…
Affected: through 1.3.5
CVE-2024-10097
8.1
1%
Nov 5
The Loginizer Security and Loginizer plugins for WordPress are vulnerable to authentication bypass in all versions up to, and including, 1.9.2
Affected: before 1.9.3
CVE-2023-2296
6.1
0%
May 30
The Loginizer WordPress plugin before 1.7.9 does not escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used…
Affected: before 1.7.9
CVE-2022-45084
6.1
0%
Apr 24
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Softaculous Loginizer plugin <= 1.7.5 versions
Affected: before 1.7.6
CVE-2018-11366
6.1
2%
May 22
init.php in the Loginizer plugin 1.3.8 through 1.3.9 for WordPress has Unauthenticated Stored Cross-Site Scripting (XSS) because logging is mishandled
Affected: 1.3.8; 1.3.9
Showing 8