Lucene search
WPScanCVELIST:CVE-2022-1614HistoryJun 20, 2022 - 10:25 a.m.
CVE-2022-1614 WP-Email < 2.69.0 - Anti-Spam Protection Bypass via IP Spoofing
2022-06-2010:25:54
CWE-639
WPScan
www.cve.org
0.001 Low
EPSS
Percentile
33.9%
The WP-EMail WordPress plugin before 2.69.0 prioritizes getting a visitor’s IP from certain HTTP headers over PHP’s REMOTE_ADDR, which makes it possible to bypass IP-based anti-spamming restrictions.
CNA Affected
[
{
"product": "WP-EMail",
"vendor": "Unknown",
"versions": [
{
"lessThan": "2.69.0",
"status": "affected",
"version": "2.69.0",
"versionType": "custom"
}
]
}
]Related
wpvulndb
wpvulndb
WP-Email < 2.69.0 - Anti-Spam Protection Bypass via IP Spoofing
2022-05-30 00:00:00
cve
cve
CVE-2022-1614
2022-06-20 11:15:09
nvd
nvd
CVE-2022-1614
2022-06-20 11:15:09
prion
prion
Design/Logic Flaw
2022-06-20 11:15:00
wpexploit
wpexploit
WP-Email < 2.69.0 - Anti-Spam Protection Bypass via IP Spoofing
2022-05-30 00:00:00
cnvd
cnvd
WordPress plugin WP-EMail has an unspecified vulnerability
2022-06-22 00:00:00