CVE-2023-4549 (published 2023-09-25T15:56:56.189Z)
The DoLogin Security WordPress plugin before 3.7 does not properly sanitize IP addresses coming from the X-Forwarded-For header, which can be used by attackers to conduct Stored XSS attacks via WordPress' login form.
Affected products: Vendor: Unknown
Product: DoLogin Security
Versions: 0