Read the docs

specialk

Records45All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high9CVSS 7.0–8.9

Exploited now

specialk records in CISA KEV

No specialk vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
User Submitted Posts 6 records MEDIUM Simple Ajax Chat 5 records MEDIUM Dashboard Widget Suite 2 records LOW Prismatic 2 records LOW Simple Download Counter 2 records LOW Theme Switcha 2 records LOW Blackhole For Bad Bots 1 record MEDIUM Contact Form X 1 record LOW

Records

1 record in Blackhole For Bad Bots · all components

TI-2022-01054 CVE-2022-1165 · GHSA-cqmc-2w22-q469

Blackhole for Bad Bots < 3.3.2 - Arbitrary IP Address Blocking via IP Spoofing

Priority MEDIUM 43

The Blackhole for Bad Bots WordPress plugin before 3.3.2 uses headers such as CF-CONNECTING-IP, CLIENT-IP etc to determine the IP address of requests hitting the blackhole URL, which allows them to be spoofed.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.0167 Published 2022-04-04 Fixed in 3.3.2 CWE-639
Open these records in search →