Severe Vulnerability Impacting 600,000 Sites Patched in Limit Login Attempts
The plugin is vulnerable in versions up to, and including, 1.7.1.A patch addressing this vulnerability was released on April 4, 2023 as version 1.7.2.
We recommend all site owners update to version 1.7.2 as soon as possible.
Details: https://www.wordfence.com/blog/2023...600000-sites-patched-in-limit-login-attempts/