PT-2024-24761 · Unknown · Loginpress Pro

Dave Jong · Published 2024-04-25 · Updated 2024-05-17 · CVE-2024-32676

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions LoginPress Pro versions prior to 3.0.0

Description The issue is related to an Improper Restriction of Excessive Authentication Attempts, which allows for the removal of important client functionality.

Recommendations For versions prior to 3.0.0, update to version 3.0.0 or later to resolve the issue.

Fix

Improper Restriction of Excessive Authentication Attempts

Weakness Enumeration

CWE-307

Related Identifiers

CVE-2024-32676

Affected Products

Loginpress Pro

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2024-32676 · Security Note
• https://t.me/cvenotify/80201 · Telegram Post
• https://patchstack.com/database/vulnerability/loginpress-pro/wordpress-loginpress-pro-plugin-2-5-3-captcha-bypass-vulnerability?_s_id=cve · Note
• https://t.me/cvenotify/77999 · Telegram Post