CVE-2015-6829

CVE-2015-6829 describes multiple SQL injection vulnerabilities in the WP Limit Login Attempts plugin for WordPress, specifically affecting versions prior to 2.0.1. Attackers can exploit this by injecting arbitrary SQL commands via the X-Forwarded-For or Client-IP HTTP headers. With a CVSS score of 7.5, this vulnerability is considered high severity, allowing for potential compromise of confidentiality, integrity, and availability with low attack complexity and no authentication required. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.