Lucene search

K
wpvulndbWpvulndbWPVDB-ID:73755596-6B52-46E9-964F-5E392458EB5D
HistoryMay 08, 2024 - 12:00 a.m.

Survey Maker < 4.1.0 - IP Address Spoofing

2024-05-0800:00:00
wpscan.com
13
wordpress
survey maker
ip address spoofing
vulnerability
http headers

AI Score

6.9

Confidence

High

EPSS

0

Percentile

9.0%

Description The Survey Maker – Best WordPress Survey Plugin plugin for WordPress is vulnerable to IP Address Spoofing in all versions up to, and including, 4.0.9 due to insufficient IP address validation and/or use of user-supplied HTTP headers as a primary method for IP retrieval. This makes it possible for unauthenticated attackers to spoof their IP address.

AI Score

6.9

Confidence

High

EPSS

0

Percentile

9.0%

Related for WPVDB-ID:73755596-6B52-46E9-964F-5E392458EB5D