Lucene search
Daniel RufWPEX-ID:15819D33-7497-4F7D-BBB8-B3AB147806C4HistoryNov 21, 2022 - 12:00 a.m.
All In One WP Security & Firewall < 5.0.8 - IP Spoofing
2022-11-2100:00:00
Daniel Ruf
148
wordpress
security
ip spoofing
http header
EPSS
0.001
Percentile
33.3%
The plugin is susceptible to IP Spoofing attacks, which can lead to bypassed security features (like IP blocks, rate limiting, brute force protection, and more).
Set HTTP_X_REAL_IP or HTTP_X_FORWARDED_FOR used in get_user_ip_address() to bypass IP-based blocks.Related
nvd
nvd
CVE-2022-4097
2022-12-12 18:15:13
openvas
openvas
prion
prion
Design/Logic Flaw
2022-12-12 18:15:00
wpvulndb
wpvulndb
All In One WP Security & Firewall < 5.0.8 - IP Spoofing
2022-11-21 00:00:00
cve
cve
CVE-2022-4097
2022-12-12 18:15:13
cvelist
cvelist
CVE-2022-4097 All In One WP Security & Firewall < 5.0.8 - IP Spoofing
2022-12-12 17:54:35