This vulnerability, classified as CWE-307, involves improper restriction of excessive authentication attempts in LoginPress Pro. It allows attackers to repeatedly attempt authentication without effective rate limiting or lockout mechanisms. The issue affects versions prior to 3.0.0 and could lead to removal or bypass of critical client-side functionality related to login protections. The CVSS v3.1 base score is 5.3, reflecting a medium severity with network attack vector, low attack complexity, no privileges or user interaction required, and impact limited to integrity loss without confidentiality or availability impact.

The vulnerability could allow attackers to perform unlimited authentication attempts, potentially enabling brute force or credential stuffing attacks. The impact is limited to integrity as per the CVSS vector, with no direct confidentiality or availability impact reported. No known exploitation in the wild has been documented.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch links are provided, users should monitor LoginPress vendor communications for updates. Until a fix is available, consider implementing external rate limiting or login attempt restrictions at the web server or application firewall level to mitigate risk.