Vendors / Wpcerber Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1 CVSS 9.0–10.0
CVSS high 0 CVSS 7.0–8.9
Exploited now Wpcerber records in CISA KEV No Wpcerber vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Records 2 records in Cerber Security Antispam & Malware Scan · all components
Priority LOW 30
The WP Cerber Security plugin for WordPress is vulnerable to IP Protection bypass in versions up to, and including 9.4 due to the plugin improperly checking for a visitor's IP address.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00347 · Published 2024-08-31 · No fix listed CWE-693
Priority LOW 30
The wp-cerber plugin before 2.7 for WordPress has XSS via the X-Forwarded-For HTTP header.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01418 · Published 2019-09-17 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
Critical1 High0 Medium3 Low0 No CVSS0