CVE-2022-1762

The iQ Block Country WordPress plugin before 1.2.20 does not properly checks HTTP headers in order to validate the origin IP address, allowing threat actors to bypass it's block feature by spoofing the headers.

CVSS v3.1

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N

EPSS

1.24% chance of exploitation in the next 30 days, 67th percentile

Published

2022-06-13

Updated

2024-08-03

Proof-of-concept exploits (1)

• https://wpscan.com/vulnerability/03254977-37cc-4365-979b-326f9637be85

References

• CVE Record
• NVD entry

Related

• CVE-2022-1761
• CVE-2022-1763
• CVE-2022-1760
• CVE-2022-1764
• CVE-2022-1759
• CVE-2022-1765