CVE-2022-2877

The Titan Anti-spam & Security WordPress plugin before 7.3.1 does not properly checks HTTP headers in order to validate the origin IP address, allowing threat actors to bypass it's block feature by spoofing the headers.

CVSS v3.1

5.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

EPSS

0.66% chance of exploitation in the next 30 days, 49th percentile

Published

2022-09-16

Updated

2024-08-03

Proof-of-concept exploits (1)

• https://wpscan.com/vulnerability/f1af4267-3a43-4b88-a8b9-c1d5b2aa9d68

References

• CVE Record
• NVD entry

Related

• CVE-2022-2874
• CVE-2022-28805
• CVE-2022-2872
• CVE-2022-28810
• CVE-2022-28712
• CVE-2022-2884