Limit Login Attempts Reloaded Archives

The Shortcodes.php file in Limit Login Attempts Reloaded improperly sanitizes user-provided URLs by using esc_attr() instead of esc_url()

This vulnerability affects the following application versions:

Limit Login Attempts Reloaded 2.23.0
Limit Login Attempts Reloaded 2.23.1
Limit Login Attempts Reloaded 2.23.2
Limit Login Attempts Reloaded 2.24.0
Limit Login Attempts Reloaded 2.24.1
Limit Login Attempts Reloaded 2.25.0
Limit Login Attempts Reloaded 2.25.1
Limit Login Attempts Reloaded 2.25.2
Limit Login Attempts Reloaded 2.25.3
Limit Login Attempts Reloaded 2.25.4
Limit Login Attempts Reloaded 2.25.5
Limit Login Attempts Reloaded 2.25.6
Limit Login Attempts Reloaded 2.25.7
Limit Login Attempts Reloaded 2.25.8
Limit Login Attempts Reloaded 2.25.9
Limit Login Attempts Reloaded 2.25.10
Limit Login Attempts Reloaded 2.25.11
Limit Login Attempts Reloaded 2.25.12
Limit Login Attempts Reloaded 2.25.13
Limit Login Attempts Reloaded 2.25.14
Limit Login Attempts Reloaded 2.25.15
Limit Login Attempts Reloaded 2.25.16
Limit Login Attempts Reloaded 2.25.17
Limit Login Attempts Reloaded 2.25.18
Limit Login Attempts Reloaded 2.25.19
Limit Login Attempts Reloaded 2.25.20
Limit Login Attempts Reloaded 2.25.21
Limit Login Attempts Reloaded 2.25.22
Limit Login Attempts Reloaded 2.25.23
Limit Login Attempts Reloaded 2.25.24
Limit Login Attempts Reloaded 2.25.25
Limit Login Attempts Reloaded 2.25.26

Same nonce is used across multiple AJAX actions, potentially allowing an attacker to reuse it to perform unauthorized actions on behalf of a user.

This vulnerability affects the following application versions:

Limit Login Attempts Reloaded 2.16.0
Limit Login Attempts Reloaded 2.17.0
Limit Login Attempts Reloaded 2.17.1
Limit Login Attempts Reloaded 2.17.2
Limit Login Attempts Reloaded 2.17.3
Limit Login Attempts Reloaded 2.17.4
Limit Login Attempts Reloaded 2.18.0
Limit Login Attempts Reloaded 2.19.0
Limit Login Attempts Reloaded 2.19.1
Limit Login Attempts Reloaded 2.19.2
Limit Login Attempts Reloaded 2.20.0
Limit Login Attempts Reloaded 2.20.1
Limit Login Attempts Reloaded 2.20.2
Limit Login Attempts Reloaded 2.20.3
Limit Login Attempts Reloaded 2.20.4
Limit Login Attempts Reloaded 2.20.5
Limit Login Attempts Reloaded 2.20.6
Limit Login Attempts Reloaded 2.21.0
Limit Login Attempts Reloaded 2.21.1
Limit Login Attempts Reloaded 2.22.0
Limit Login Attempts Reloaded 2.22.1
Limit Login Attempts Reloaded 2.23.0
Limit Login Attempts Reloaded 2.23.1
Limit Login Attempts Reloaded 2.23.2
Limit Login Attempts Reloaded 2.24.0
Limit Login Attempts Reloaded 2.24.1
Limit Login Attempts Reloaded 2.25.0
Limit Login Attempts Reloaded 2.25.1
Limit Login Attempts Reloaded 2.25.2
Limit Login Attempts Reloaded 2.25.3
Limit Login Attempts Reloaded 2.25.4
Limit Login Attempts Reloaded 2.25.5
Limit Login Attempts Reloaded 2.25.6
Limit Login Attempts Reloaded 2.25.7
Limit Login Attempts Reloaded 2.25.8
Limit Login Attempts Reloaded 2.25.9
Limit Login Attempts Reloaded 2.25.10
Limit Login Attempts Reloaded 2.25.11
Limit Login Attempts Reloaded 2.25.12
Limit Login Attempts Reloaded 2.25.13
Limit Login Attempts Reloaded 2.25.14
Limit Login Attempts Reloaded 2.25.15
Limit Login Attempts Reloaded 2.25.16
Limit Login Attempts Reloaded 2.25.17
Limit Login Attempts Reloaded 2.25.18
Limit Login Attempts Reloaded 2.25.19
Limit Login Attempts Reloaded 2.25.20
Limit Login Attempts Reloaded 2.25.21
Limit Login Attempts Reloaded 2.25.22
Limit Login Attempts Reloaded 2.25.23
Limit Login Attempts Reloaded 2.25.24
Limit Login Attempts Reloaded 2.25.25

Om os