CVE-2017-12650: Loginizer

Critical severity, CVSS 9.8. EPSS: 1.8% chance of exploitation in the next 30 days.

SQL Injection exists in the Loginizer plugin before 1.3.6 for WordPress via the X-Forwarded-For HTTP header.

Affected products

• Loginizer Loginizer: up to and including 1.3.5

Published 2017-08-07. Last modified 2026-06-17.