Vulnerabilities / Limit Login Attempts Reloaded
Limit Login Attempts Reloaded vulnerabilities
Advisories WPSec published for Limit Login Attempts Security – Brute Force Protection, 2FA, Firewall & Login Security. Other sources may list more. Its attack surface: Limit Login Attempts Reloaded on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-11-06 | WPSEC-2026-2633 | Limit Login Attempts Reloaded <= 3.4.0 - Unauthenticated Two-Factor Authentication Bypass via Failed Two-Factor Handshake | High 7.4 | 3.4.1 |
| 2026-11-06 | WPSEC-2026-2632 | Limit Login Attempts Reloaded <= 3.4.0 - Unauthenticated Two-Factor Authentication Bypass via XML-RPC | High 7.4 | 3.4.1 |
License: CC BY 4.0