Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:ip_based_login:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductIp Based Login (c467d9b8-6c85-5b6f-a0bd-5995fb6f6d1c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-13118 vulnerable 2026-06-08 06:25:36.746056 IP Based Login < 2.4.1 - Log Deletion via CSRF
The IP Based Login WordPress plugin before 2.4.1 does not have CSRF checks in some places, which could allow attackers to make logged in users delete all logs via a CSRF attack
Published: 2025-03-25T06:00:12.234Z
Updated: 2025-03-25T13:50:48.275Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-12800 vulnerable 2026-06-08 06:25:36.125046 IP Based Login < 2.4.1 - Admin+ Stored XSS
The IP Based Login WordPress plugin before 2.4.1 does not sanitise values when importing, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
Published: 2025-05-15T20:06:56.920Z
Updated: 2025-05-20T19:30:12.006Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.