CVE-2022-4097

Published Dec 12, 2022

Last updated a year ago

CVSS medium 5.3

Overview

Description: The All-In-One Security (AIOS) WordPress plugin before 5.0.8 is susceptible to IP Spoofing attacks, which can lead to bypassed security features (like IP blocks, rate limiting, brute force protection, and more).
Source: contact@wpscan.com
NVD status: Modified

Risk scores

CVSS 3.1

Type: Primary
Base score: 5.3
Impact score: 1.4
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Severity: MEDIUM

Weaknesses

nvd@nist.gov: CWE-639

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:updraftplus:all-in-one_security:*:*:*:*:*:wordpress:*:*",
            "vulnerable": true,
            "matchCriteriaId": "705C7C6B-6066-4D9F-BC5E-864F79B603D7",
            "versionEndExcluding": "5.0.8"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References