CVE-2017-12650

Critical

Published: 07/08/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The Loginizer plugin before version 1.3.6 for WordPress has an SQL Injection vulnerability that can be exploited via the X-Forwarded-For HTTP header.

Risk Assessment

An attacker could exploit this vulnerability to gain unauthorized access to the database, potentially leading to the exposure of sensitive information.

Recommendation

It is recommended to update the Loginizer plugin to version 1.3.6 or later to mitigate the risk associated with this vulnerability.

Original NVD description (English source)

SQL Injection exists in the Loginizer plugin before 1.3.6 for WordPress via the X-Forwarded-For HTTP header.