TI-2022-01450 CVE-2022-1579 · GHSA-pqvw-xcm9-69ph
Login Block IPs <= 1.0.0 - IP Spoofing Bypass
Priority HIGH 66
The function check_is_login_page() uses headers for the IP check, which can be easily spoofed.
Gunkastudios
Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Gunkastudios records in CISA KEVNo Gunkastudios vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
2 records
TI-2022-02859 CVE-2022-3098 · GHSA-39x9-h5mq-q3m8
Login Block IPs <= 1.0.0 - Arbitrary Setting Update via CSRF
Priority MEDIUM 53
The Login Block IPs WordPress plugin through 1.0.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack