CVE-2022-2877CWE-639

Titan Anti-spam & Security < 7.3.1 - Protection Bypass due to IP Spoofing

published September 16, 2022

CVSS
—
EPSS
1%
Percentile
54.7
In the wild
Unconfirmed
What it is

The Titan Anti-spam & Security WordPress plugin before 7.3.1 does not properly checks HTTP headers in order to validate the origin IP address, allowing threat actors to bypass it's block feature by spoofing the headers.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00758 · 54.7th percentile
Weakness
CWE-639 · Authorization Bypass Through User-Controlled Key
Published
2022-09-16T08:40Z
EPSS history
Timeline
  • 16 SEP 08:40Z
    Titan Anti-spam & Security < 7.3.1 - Protection Bypass due to IP Spoofing
    cvelistv5