CyberRota Analysis
AI-GeneratedThe Limit Login Attempts Reloaded plugin for WordPress versions prior to 3.3.5 is vulnerable as it fails to enforce case-insensitive checks against its username denylist and does not consider the associated email address, potentially allowing blocked accounts to log in. This could lead to unauthorized access to sensitive areas of a WordPress site. WordPress administrators using this plugin should prioritize updating to the latest version to mitigate the risk of unauthorized logins.
Original NVD Description
The Limit Login Attempts Reloaded WordPress plugin before 3.3.5 does not compare logins against its username denylist case-insensitively and does not account for the account's email address, allowing an account an administrator intended to block from logging in to authenticate anyway.