CVE-2025-23568

Summary

CVE-2025-23568 is a Cross-site Scripting (XSS) vulnerability affecting WP Login Attempt Log, version n/a through 1.3. The flaw stems from improper neutralization of user input during web page generation. Malicious scripts can be injected and executed in the context of the affected website, potentially stealing user information or taking control of the user's browser. Attackers can exploit this vulnerability by manipulating login attempt logs, posing a serious threat to websites using this plugin. Users are advised to update to the latest version of WP Login Attempt Log as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.