CVE-2017-12651

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Cross Site Request Forgery (CSRF) exists in the Blacklist and Whitelist IP Wizard in init.php in the Loginizer plugin before 1.3.6 for WordPress because the HTTP Referer header is not checked.

Metrics

CVSS 3.0 8.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-352

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://blog.wpscans.com/sql-injection-and-csrf-security-vulnerability-in-loginizer/Third Party Advisory
https://sv.wordpress.org/plugins/loginizer/#developersThird Party Advisory
https://wpvulndb.com/vulnerabilities/8884Third Party Advisory
https://blog.wpscans.com/sql-injection-and-csrf-security-vulnerability-in-loginizer/Third Party Advisory
https://sv.wordpress.org/plugins/loginizer/#developersThird Party Advisory
https://wpvulndb.com/vulnerabilities/8884Third Party Advisory

Timeline

Published: Aug 7, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-126529.8libpng before 1.6.32 does not properly check the length of chunks against the user limit.CVE-2017-126537.8360 Total Security 9.0.0.1202 before 2017-07-07 allows Privilege Escalation via a Trojan horse Shcore.dll file in any directory in the PATH,CVE-2017-126546.5The ReadPICTImage function in coders/pict.c in ImageMagick 7.0.6-3 allows attackers to cause a denial of service (memory leak) via a crafted CVE-2017-126556.1Cross-Site Scripting (XSS) exists in NexusPHP version v1.5 via the query parameter to log.php in a dailylog action.CVE-2017-12665.4IBM Security Guardium 10.0 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified CVE-2017-126628.8ImageMagick 7.0.6-2 has a memory leak vulnerability in WritePDFImage in coders/pdf.c.CVE-2017-126638.8ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteMAPImage in coders/map.c.CVE-2017-126648.8ImageMagick 7.0.6-2 has a memory leak vulnerability in WritePALMImage in coders/palm.c.CVE-2017-126658.8ImageMagick 7.0.6-2 has a memory leak vulnerability in WritePICTImage in coders/pict.c.CVE-2017-126668.8ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteINLINEImage in coders/inline.c.CVE-2017-126678.8ImageMagick 7.0.6-1 has a memory leak vulnerability in ReadMATImage in coders\mat.c.CVE-2017-126688.8ImageMagick 7.0.6-2 has a memory leak vulnerability in WritePCXImage in coders/pcx.c.