Lucene search
Daniel RufPATCHSTACK:0C24E05EF93F2D62DDB02631EC38FE1AHistorySep 05, 2022 - 12:00 a.m.
WordPress Login Block IPs plugin <= 1.0.0 - Arbitrary Setting Update via Cross-Site Request Forgery (CSRF) vulnerability
2022-09-0500:00:00
Daniel Ruf
patchstack.com
14
wordpress
login block ips plugin
arbitrary setting update
cross-site request forgery (csrf)
EPSS
0.001
Percentile
25.9%
Arbitrary Setting Update via Cross-Site Request Forgery (CSRF) vulnerability discovered by Daniel Ruf in WordPress Login Block IPs plugin (versions <= 1.0.0).
Solution
Deactivate and delete. This plugin has been closed as of September 5, 2022 and is not available for download. This closure is temporary, pending a full review.
Related
cvelist
cvelist
CVE-2022-3098 Login Block IPs <= 1.0.0 - Arbitrary Setting Update via CSRF
2022-09-26 12:35:43
nvd
nvd
CVE-2022-3098
2022-09-26 13:15:11
cve
cve
CVE-2022-3098
2022-09-26 13:15:11
prion
prion
Cross site request forgery (csrf)
2022-09-26 13:15:00
wpvulndb
wpvulndb
Login Block IPs <= 1.0.0 - Arbitrary Setting Update via CSRF
2022-09-05 00:00:00
cnvd
cnvd
WordPress Login Block IPs cross-site request forgery vulnerability
2022-09-28 00:00:00
wpexploit
wpexploit
Login Block IPs <= 1.0.0 - Arbitrary Setting Update via CSRF
2022-09-05 00:00:00