CVE-2022-4097 All In One WP Security & Firewall < 5.0.8 - IP Spoofing

2022-12-1217:54:35

WPScan

www.cve.org

cve-2022-4097

all-in-one security

wordpress plugin

ip spoofing

security features

EPSS

0.001

Percentile

33.3%

JSON

The All-In-One Security (AIOS) WordPress plugin before 5.0.8 is susceptible to IP Spoofing attacks, which can lead to bypassed security features (like IP blocks, rate limiting, brute force protection, and more).

CNA Affected

[
  {
    "vendor": "Unknown",
    "product": "All-In-One Security (AIOS)",
    "collectionURL": "https://wordpress.org/plugins",
    "versions": [
      {
        "status": "affected",
        "versionType": "custom",
        "version": "0",
        "lessThan": "5.0.8"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

wpscan.com/vulnerability/15819d33-7497-4f7d-bbb8-b3ab147806c4

EPSS

0.001

Percentile

33.3%

JSON

Related for CVELIST:CVE-2022-4097