TI-2021-15479 CVE-2021-37597 · GHSA-hwhr-mg66-h8cp
WP Cerber before 8.9.3 allows MFA bypass via wordpress_logged_in_[hash] manipulation.
Priority MEDIUM 46
WP Cerber before 8.9.3 allows MFA bypass via wordpress_logged_in_[hash] manipulation.
Wpcerber
Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Wpcerber records in CISA KEVNo Wpcerber vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
4 records
TI-2022-03748 CVE-2022-4100 · GHSA-m748-r53c-f6pp
WP Cerber Security <= 9.4 - IP Protection Bypass
Priority LOW 30
The WP Cerber Security plugin for WordPress is vulnerable to IP Protection bypass in versions up to, and including 9.4 due to the plugin improperly checking for a visitor's IP address.
TI-2016-09028 CVE-2016-10990 · GHSA-32r5-6c8g-f64h
The wp-cerber plugin before 2.7 for WordPress has XSS via the X-Forwarded-For HTTP header.
Priority LOW 30
The wp-cerber plugin before 2.7 for WordPress has XSS via the X-Forwarded-For HTTP header.
TI-2021-15480 CVE-2021-37598 · GHSA-7fw3-2wmp-j43f
WP Cerber before 8.9.3 allows bypass of /wp-json access control via a trailing ? character.
Priority LOW 29
WP Cerber before 8.9.3 allows bypass of /wp-json access control via a trailing ? character.