Vulnerabilities > CVE-2022-4100 - Unspecified vulnerability in Wpcerber Cerber Security Antispam & Malware Scan

CVSS 5.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

LOW

Availability impact

NONE

network

low complexity

wpcerber

NVD

Published: 2024-08-31

Updated: 2024-09-20

Summary

The WP Cerber Security plugin for WordPress is vulnerable to IP Protection bypass in versions up to, and including 9.4 due to the plugin improperly checking for a visitor's IP address. This makes it possible for an attacker whose IP address has been blocked to bypass this control by setting the X-Forwarded-For: HTTP header to an IP Address that hasn't been blocked.

Vulnerable Configurations

Part	Description	Count
Application	Wpcerber Wpcerber Cerber Security Antispam & Malware Scan - Wpcerber Cerber Security Antispam & Malware Scan 2.0.1.6 Wpcerber Cerber Security Antispam & Malware Scan 2.7 Wpcerber Cerber Security Antispam & Malware Scan 6.2 Wpcerber Cerber Security Antispam & Malware Scan 6.5 Wpcerber Cerber Security Antispam & Malware Scan 6.7 Wpcerber Cerber Security Antispam & Malware Scan 6.7.5 Wpcerber Cerber Security Antispam & Malware Scan 7.0 Wpcerber Cerber Security Antispam & Malware Scan 7.2 Wpcerber Cerber Security Antispam & Malware Scan 7.5 Wpcerber Cerber Security Antispam & Malware Scan 7.6 Wpcerber Cerber Security Antispam & Malware Scan 7.7 Wpcerber Cerber Security Antispam & Malware Scan 7.8 Wpcerber Cerber Security Antispam & Malware Scan 7.8.5 Wpcerber Cerber Security Antispam & Malware Scan 7.9 Wpcerber Cerber Security Antispam & Malware Scan 7.9.3 Wpcerber Cerber Security Antispam & Malware Scan 7.9.7 Wpcerber Cerber Security Antispam & Malware Scan 8.0 Wpcerber Cerber Security Antispam & Malware Scan 8.1 Wpcerber Cerber Security Antispam & Malware Scan 8.2 Wpcerber Cerber Security Antispam & Malware Scan 8.3 Wpcerber Cerber Security Antispam & Malware Scan 8.4	22

Summary

Vulnerable Configurations

References