PT-2022-13978 · WordPress+1 · Login Block Ips

Daniel Ruf · CVE-2022-1579 · Published 2022-11-21 · Updated 2022-11-23

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned.

Description The issue concerns the function check is login page(), which relies on headers for IP checks. This approach can be easily spoofed, potentially allowing unauthorized access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2022-1579

Affected Products

Login Block Ips

References · 4

• 🔥 https://wpscan.com/vulnerability/6f3d40fa-458b-44f0-9407-763e80b29668 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-1579 · Security Note
• https://osv.dev/vulnerability/CVE-2022-1579 · Vendor Advisory
• https://t.me/cvenotify/38149 · Telegram Post