Lucene search

WpvulndbWPVDB-ID:4BACC9B2-9B65-4FA6-A935-4DA17A7E9159

HistoryJan 17, 2024 - 12:00 a.m.

WordPress Manutenção < 1.0.7 - IP Spoofing to Maintenance Mode Bypass

2024-01-1700:00:00

wpscan.com

wordpress

manutenção

ip spoofing

maintenance mode bypass

validation

ip addresses

unauthenticated attackers

x-forwarded-for

http header

9.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Description The plugin is vulnerable to IP Spoofing due to insufficient validation of IP addresses, allowing unauthenticated attackers to bypass the plugin’s maintenance mode restriction via the ‘X-Forwarded-For’ HTTP header.

CPENameOperatorVersion
eq1.0.7

CPE	Name	Operator	Version
		eq	1.0.7

References

patchstack.com/database/vulnerability/wp-manutencao/wordpress-wordpress-manutencao-plugin-1-0-6-bypass-vulnerability