CVE-2022-4539CWE-348

Web Application Firewall <= 2.1.2 - IP Address Spoofing to Protection Mechanism Bypass

Medium · published August 31, 2024

CVSS v3.1
5.3
EPSS
1%
Percentile
49.4
In the wild
Unconfirmed
What it is

The Web Application Firewall plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 2.1.2. This is due to insufficient restrictions on where the IP Address information is being retrieved for request logging and login restrictions. Attackers can supply the X-Forwarded-For header with with a different IP Address that will be logged and can be used to bypass settings that may have blocked out an IP address or country from logging in.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00628 · 49.4th percentile
Weakness
CWE-348 · Use of Less Trusted Source
Published
2024-08-31T09:35Z
EPSS history
Timeline
  • 31 AUG 09:35Z
    Web Application Firewall <= 2.1.2 - IP Address Spoofing to Protection Mechanism Bypass
    cvelistv5