CVE Database /
CVE-2017-12651
CVE · High
CVE-2017-12651 — Loginizer [loginizer] < 1.3.6
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2017-12651
|
Loginizer [loginizer] < 1.3.6 |
Cross-Site Request Forgery (CSRF) |
High
8.8
|
< 1.3.6
|
1.3.6 |
2017-08-07 |
—
|
CVE-2017-12651
A cross-site request forgery vulnerability exists in the Loginizer plugin version 1.3.5 and earlier, specifically within the IP blacklist and whitelist wizard functionality located in the init.php file. An attacker could exploit this flaw to perform unauthorized actions on behalf of authenticated users. The vulnerability has been patched in version 1.3.6 and later.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings