CVE-2024-13118: IP Based Login < 2.4.1 - Log Deletion via CSRF
Published Mar 25, 2025
·Updated
The IP Based Login WordPress plugin before 2.4.1 does not have CSRF checks in some places, which could allow attackers to make logged in users delete all logs via a CSRF attack
Affected Software
2 affected components
Brijeshk89 Ip Based Login Wordpress<2.4.1
WordPress IP Based Login<2.4.1
Event History
Mar 25, 2025
CVE Published
via MITRE·06:00 AM
Data Sourced
via MITRE·06:00 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-13118?
CVE-2024-13118 has a moderate severity rating due to the potential for attackers to exploit CSRF vulnerabilities.
2
How do I fix CVE-2024-13118?
To fix CVE-2024-13118, update the WordPress IP Based Login plugin to version 2.4.1 or later.
3
What does CVE-2024-13118 exploit?
CVE-2024-13118 exploits the lack of CSRF checks in the IP Based Login WordPress plugin, allowing attackers to delete logs.
4
Who is affected by CVE-2024-13118?
Users of the WordPress IP Based Login plugin versions before 2.4.1 are affected by CVE-2024-13118.
5
What impact could CVE-2024-13118 have on my website?
CVE-2024-13118 could allow unauthorized users to delete important logs on your website through CSRF attacks.