PT-2024-11638 · WordPress · Wp Cerber Security

Chihyu · Published 2024-08-31 · Updated 2024-09-20 · CVE-2022-4100

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions WP Cerber Security plugin for WordPress versions up to, and including 9.4

Description The WP Cerber Security plugin for WordPress is vulnerable to IP Protection bypass due to the plugin improperly checking for a visitor's IP address. This makes it possible for an attacker whose IP address has been blocked to bypass this control by setting the X-Forwarded-For HTTP header to an IP Address that hasn't been blocked.

Recommendations For versions up to, and including 9.4, update to a version that properly checks for a visitor's IP address to prevent IP Protection bypass. As a temporary workaround, consider restricting access to the X-Forwarded-For HTTP header to minimize the risk of exploitation.

Fix

Protection Mechanism Failure

Weakness Enumeration

CWE-693

Related Identifiers

CVE-2022-4100

Affected Products

Wp Cerber Security

References · 8

• https://osv.dev/vulnerability/CVE-2022-4100 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-4100 · Security Note
• https://plugins.trac.wordpress.org/changeset/2865322/wp-cerber/trunk/cerber-common.php · Patch
• https://wordfence.com/threat-intel/vulnerabilities/id/03ccd474-42f4-4cbb-823e-93fe4db1bf80?source=cve · Note
• https://twitter.com/CVEnew/status/1829804111631417836 · Twitter Post
• https://t.me/cvenotify/95383 · Telegram Post
• https://t.me/cvenotify/92956 · Telegram Post
• https://t.me/cvedetector/4575 · Telegram Post