Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Gunkastudios Component: Login Block Ips Clear all filters
TI-2022-01450 CVE-2022-1579 · GHSA-pqvw-xcm9-69ph

Login Block IPs <= 1.0.0 - IP Spoofing Bypass

Priority HIGH 66

The function check_is_login_page() uses headers for the IP check, which can be easily spoofed.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00722 Published 2022-11-21 No fix listed
TI-2022-02859 CVE-2022-3098 · GHSA-39x9-h5mq-q3m8

Login Block IPs <= 1.0.0 - Arbitrary Setting Update via CSRF

Priority MEDIUM 53

The Login Block IPs WordPress plugin through 1.0.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00325 Published 2022-09-26 No fix listed CWE-352