security issue

same here. will be there an update in the near future?

Hello,

According to the posting it is about versions prior than 1.7.2

The version 1.7.2 already has fix for it:

In the file:
limit-login-attempts/limit-login-attempts.php
on lines 904,906

esc_html($user)

And the message was only about authenticated users. Those who already have access to WordPress dashboard.

wpscan.com is a real security issue. They don’t only tell everyone about security holes. They also provide a sample code that can be used to break your website.

Stanislav