Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-55692
HistoryJun 15, 2022 - 12:00 a.m.

WordPress plugin iQ Block Country IP spoofing attack vulnerability

2022-06-1500:00:00
China National Vulnerability Database
www.cnvd.org.cn
11

0.001 Low

EPSS

Percentile

34.0%

WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. iQ Block Country version 1.2.13 and earlier versions of the WordPress plugin are vulnerable to IP spoofing attacks, which stem from not properly checking the HTTP header to verify the source IP address. An attacker could exploit this vulnerability to bypass its blocking functionality by spoofing the header.

0.001 Low

EPSS

Percentile

34.0%