Lucene search

K
wpvulndbWpvulndbWPVDB-ID:048BB679-BDF1-49DB-9D55-81FBA28ED71F
HistoryJan 04, 2024 - 12:00 a.m.

Rate my Post < 3.4.3 - IP Spoofing

2024-01-0400:00:00
wpscan.com
8
ip spoofing
vulnerable version
user-supplied headers
unauthenticated attackers

AI Score

7

Confidence

Low

EPSS

0

Percentile

9.0%

Description The Rate my Post – WP Rating System plugin for WordPress is vulnerable to IP Address Spoofing in all versions up to, and including, 3.4.2 due to insufficient IP address validation and use of user-supplied HTTP headers as a primary method for IP retrieval. This makes it possible for unauthenticated attackers to vote on posts multiple times.

AI Score

7

Confidence

Low

EPSS

0

Percentile

9.0%

Related for WPVDB-ID:048BB679-BDF1-49DB-9D55-81FBA28ED71F