Vulnerabilities > Felixmoira

DATE CVE VULNERABILITY TITLE RISK
2024-09-19 CVE-2022-4533 Insufficient Verification of Data Authenticity vulnerability in Felixmoira Limit Login Attempts Plus
The Limit Login Attempts Plus plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 1.1.0.
network
low complexity
felixmoira CWE-345
5.3
2024-02-02 CVE-2024-0844 Path Traversal vulnerability in Felixmoira Popup More Popups, Lightboxes, and More Popup Modules
The Popup More Popups, Lightboxes, and more popup modules plugin for WordPress is vulnerable to Local File Inclusion in version 2.1.6 via the ycfChangeElementData() function.
network
low complexity
felixmoira CWE-22
7.2