Gunkastudios

gunkastudios

2 CVEs • 1 product

Products (1)

Click to collapse

Toggle

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-1579 1Gunkastudios 1Login Block Ips Jun 17, 2026 Nov 21, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 The function check_is_login_page() uses headers for the IP check, which can be easily spoofed.
CVE-2022-3098 1Gunkastudios 1Login Block Ips Jun 17, 2026 Sep 26, 2022 N/A· v4 4.3 MEDIUM· v3 N/A· v2 The Login Block IPs WordPress plugin through 1.0.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack