N4nj0/CVE-2020-35590

PoC

Brute-force tool for WordPress Plugin Limit Login Attempts Reloaded >=2.13.0 - Login Limit Bypass (CVE-2020-35590)

view exploit source poc_in_githubauthor N4nj0published 2020-12-23catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2020-35590US	critical9.8	4.35% (91st)	Exploit	2020-12-21
LimitLoginAttempts.php in the limit-login-attempts-reloaded plugin before 2.17.4 for WordPress allows a bypass of (per IP address) rate limits because the X-Forwarded-For header ca…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.