What’s Vulnerable › Vulnerabilities

CVE-2017-12650

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-08-07 · updated 2026-06-17
• Weakness: CWE-89

Description

SQL Injection exists in the Loginizer plugin before 1.3.6 for WordPress via the X-Forwarded-For HTTP header.

Affected products

• Softaculous Loginizer: through 1.3.5

References

• https://blog.wpscans.com/sql-injection-and-csrf-security-vulnerability-in-loginizer/
• https://sv.wordpress.org/plugins/loginizer/#developers
• https://wpvulndb.com/vulnerabilities/8883
• https://blog.wpscans.com/sql-injection-and-csrf-security-vulnerability-in-loginizer/
• https://sv.wordpress.org/plugins/loginizer/#developers
• https://wpvulndb.com/vulnerabilities/8883

Get alerted when CVE-2017-12650 or the next vulnerability affects your stack