Description
WordPress Plugin WP Limit Login Attempts is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently bypass the IP-based restrictions on login forms. WordPress Plugin WP Limit Login Attempts version 2.6.4 is vulnerable; prior versions may also be affected.
Remediation
Disable and remove the plugin until a fix is available
References
Related Vulnerabilities
Joomla Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-0837)
WordPress Plugin Fitness Trainer-Training Membership Cross-Site Scripting (1.0.8)
WordPress Plugin Flexible Captcha Security Bypass (4.0)
WordPress Plugin YOP Poll Cross-Site Scripting (5.8.0)
WordPress Plugin Comments-wpDiscuz Cross-Site Scripting (7.3.1)