Lucene search

K
cvelistWPScanCVELIST:CVE-2022-1762
HistoryJun 13, 2022 - 12:42 p.m.

CVE-2022-1762 iQ Block Country < 1.2.20 - Protection Bypass due to IP Spoofing

2022-06-1312:42:39
WPScan
www.cve.org

0.001 Low

EPSS

Percentile

34.0%

The iQ Block Country WordPress plugin before 1.2.20 does not properly checks HTTP headers in order to validate the origin IP address, allowing threat actors to bypass it’s block feature by spoofing the headers.

CNA Affected

[
  {
    "vendor": "Unknown",
    "product": "iQ Block Country",
    "versions": [
      {
        "status": "affected",
        "versionType": "custom",
        "version": "0",
        "lessThan": "1.2.20"
      }
    ],
    "defaultStatus": "unaffected",
    "collectionURL": "https://wordpress.org/plugins"
  }
]

0.001 Low

EPSS

Percentile

34.0%

Related for CVELIST:CVE-2022-1762