CVE-2022-1762
iQ Block Country < 1.2.20 - Protection Bypass due to IP Spoofing
HIGH 7.5EPSS 1.2%
The iQ Block Country WordPress plugin before 1.2.20 does not properly checks HTTP headers in order to validate the origin IP address, allowing threat actors to bypass it's block feature by spoofing the headers.
- Affected
- iQ Block Country
- CVSS v3.1 NVD
- 7.5 HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - CVSS v2.0 NVD
- 5.0 MEDIUM
AV:N/AC:L/Au:N/C:N/I:P/A:N - EPSS
- 1.24% chance of exploitation in the next 30 days, 69th percentile
- Published
- 2022-06-13
- Updated
- 2024-08-03