CVE-2022-4532 affects the LOGIN AND REGISTRATION ATTEMPTS LIMIT WordPress plugin, versions up to and including 2.1, due to insufficient IP address validation. Attackers can spoof their IP address using the X-Forwarded-For header, bypassing login restrictions and logging inaccurate information. This vulnerability has a CVSS score of 6.5 (Medium), indicating a low attack complexity with potential for limited confidentiality and integrity impact. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
| Krut1 | LOGIN AND REGISTRATION ATTEMPTS LIMIT | >= 0, <= 2.1CNA affecteddefault unaffected |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.