Lucene search
HistorySep 26, 2022 - 1:15 p.m.
CVE-2022-3098
wordpress
csrf
login block ips
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
EPSS
0.001
Percentile
25.9%
The Login Block IPs WordPress plugin through 1.0.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
Affected configurations
Node
gunkastudioslogin_block_ipsRange≤1.0.0wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| gunkastudios | login_block_ips | * | cpe:2.3:a:gunkastudios:login_block_ips:*:*:*:*:*:wordpress:*:* |
Related
cvelist
cvelist
CVE-2022-3098 Login Block IPs <= 1.0.0 - Arbitrary Setting Update via CSRF
2022-09-26 12:35:43
patchstack
patchstack
cve
cve
CVE-2022-3098
2022-09-26 13:15:11
prion
prion
Cross site request forgery (csrf)
2022-09-26 13:15:00
wpvulndb
wpvulndb
Login Block IPs <= 1.0.0 - Arbitrary Setting Update via CSRF
2022-09-05 00:00:00
cnvd
cnvd
WordPress Login Block IPs cross-site request forgery vulnerability
2022-09-28 00:00:00
wpexploit
wpexploit
Login Block IPs <= 1.0.0 - Arbitrary Setting Update via CSRF
2022-09-05 00:00:00
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
EPSS
0.001
Percentile
25.9%
Related for NVD:CVE-2022-3098