Threats tagged 'ghsa-8j5v-9pw2-99cj'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-118439The Limit Login Attempts Security WordPress plugin before 3.4.2 does not validate the destination of a server-side High2026-11-11GCVE DatabaseCVE-2026-118439 The Limit Login Attempts Security WordPress plugin versions before 3.4.2 contains a server-side request forgery (SSRF) vulnerability. This flaw allows users with administrator privileges to cause the site to send requests to arbitrary hosts, including internal network addresses, due to lack of validation on a user-supplied setup value. Report on CVE-2026-118439 Vulnerability #ghsa-8j5v-9pw2-99cj	GCVE Database	2026-11-11

Page 1 of 1