CVE-2022-4100
Medium
Description
The WP Cerber Security plugin for WordPress is vulnerable to IP Protection bypass in versions up to, and including 9.4 due to the plugin improperly checking for a visitor's IP address. This makes it possible for an attacker whose IP address has been blocked to bypass this control by setting the X-Forwarded-For: HTTP header to an IP Address that hasn't been blocked.
SeverityMedium
CVSS5.3
Exploit probability—
ProductWpcerber Cerber Security Antispam \& Malware Scan
PublishedAug 31, 2024
First seenAug 31, 2024
Weakness typeCWE-693CWE-693
How to fix
Update
- wpcerber cerber_security_antispam_\&_malware_scan9.5 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wpcerber cerber_security_antispam_\&_malware_scan | v < 9.5 | 9.5 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.