CVE-2022-1579 Login Block IPs <= 1.0.0 - IP Spoofing Bypass

2022-11-2100:00:00

WPScan

www.cve.org

cve-2022-1579

ip spoofing bypass

function check_is_login_page()

headers

vulnerable

0.001 Low

EPSS

Percentile

34.0%

JSON

The function check_is_login_page() uses headers for the IP check, which can be easily spoofed.

CNA Affected

[
  {
    "vendor": "Unknown",
    "product": "Login Block IPs",
    "collectionURL": "https://wordpress.org/plugins",
    "versions": [
      {
        "status": "affected",
        "versionType": "custom",
        "version": "0",
        "lessThanOrEqual": "1.0.0"
      }
    ],
    "defaultStatus": "affected"
  }
]

References

wpscan.com/vulnerability/6f3d40fa-458b-44f0-9407-763e80b29668

0.001 Low

EPSS

Percentile

34.0%

JSON

Related for CVELIST:CVE-2022-1579