Read the docs

Cm-wp

Records10All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Cm-wp records in CISA KEV

No Cm-wp vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Social Slider Widget 3 records MEDIUM Auto Featured Image 2 records HIGH Clearfy 2 records MEDIUM Woody Code Snippets 2 records LOW Titan Anti-spam & Security 1 record LOW

Records

1 record in Titan Anti-spam & Security · all components

TI-2022-02668 CVE-2022-2877 · GHSA-m5jh-xgpc-2h9r

Titan Anti-spam & Security < 7.3.1 - Protection Bypass due to IP Spoofing

Priority LOW 25

The Titan Anti-spam & Security WordPress plugin before 7.3.1 does not properly checks HTTP headers in order to validate the origin IP address, allowing threat actors to bypass it's block feature by spoofing the headers.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00758 Published 2022-09-16 Fixed in 7.3.1 CWE-639
Open these records in search →