iQ Block Country < 1.2.20 - Protection Bypass due to IP Spoofing
published June 13, 2022
CVSS
—
EPSS
1%
Percentile
69.0
In the wild
Unconfirmed
What it is
The iQ Block Country WordPress plugin before 1.2.20 does not properly checks HTTP headers in order to validate the origin IP address, allowing threat actors to bypass it's block feature by spoofing the headers.
The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01240 · 69.0th percentile
Published
2022-06-13T12:42Z
EPSS history
Timeline
13 JUN 12:42Z
iQ Block Country < 1.2.20 - Protection Bypass due to IP Spoofing