CVE

CVE-2022-0787

9.8

CVSS

Description

The Limit Login Attempts (Spam Protection) WordPress plugin before 5.1 does not sanitise and escape some parameters before using them in SQL statements via AJAX actions (available to unauthenticated users), leading to SQL Injections

Attack Vector

Privileges Req.

User Interaction

limit login attempts (spam protection)

Updated Sep 26, 2026View on NVD →

S4E scanner

criticalProduct Based Web Vulnerabilities~10 seconds

CVE-2022-0787 Scanner

CVE-2022-0787 scanner - SQL Injection vulnerability in Limit Login Attempts (Spam Protection)

Used 3.5k times · 3.3k assets checked · domain, ipv4, subdomain

Scanner page →Run scanner

CVE history: limit login attempts (spam protection)

Predict next CVE date with AI

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →