Unrated severityNVD Advisory· Published Sep 16, 2015· Updated Jun 17, 2026

CVE-2015-6829

Description

Multiple SQL injection vulnerabilities in the getip function in wp-limit-login-attempts.php in the WP Limit Login Attempts plugin before 2.0.1 for WordPress allow remote attackers to execute arbitrary SQL commands via the (1) X-Forwarded-For or (2) Client-IP HTTP header.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Ciphercoin/Wp Limit Login Attempts
cpe:2.3:a:ciphercoin:wp_limit_login_attempts:*:*:*:*:*:wordpress:*:*
Range: <=2.0.0
WordPress/Login Attempts Limit Wpllm-fuzzy
Range: <2.0.1
Package: https://wordpress.org/plugins/login-attempts-limit-wp

Patches

Vulnerability mechanics

References

www.openwall.com/lists/oss-security/2015/09/05/4nvdExploit
www.openwall.com/lists/oss-security/2015/09/06/3nvdExploit
wordpress.org/support/topic/sql-injection-vulnerability-9nvdExploit
plugins.trac.wordpress.org/changeset/1239492/wp-limit-login-attemptsnvd
wpvulndb.com/vulnerabilities/8178nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000