CVE-2022-4097

All In One WP Security & Firewall < 5.0.8 - IP Spoofing

Medium · published December 12, 2022

CVSS v3.1
5.3
EPSS
1%
Percentile
48.3
In the wild
Unconfirmed
What it is

The All-In-One Security (AIOS) WordPress plugin before 5.0.8 is susceptible to IP Spoofing attacks, which can lead to bypassed security features (like IP blocks, rate limiting, brute force protection, and more).

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00605 · 48.3th percentile
Published
2022-12-12T17:54Z
EPSS history
Timeline
  • 12 DEC 17:54Z
    All In One WP Security & Firewall < 5.0.8 - IP Spoofing
    cvelistv5