CVE-2022-2877

Titan Anti-spam & Security < 7.3.1 - Protection Bypass due to IP Spoofing

The Titan Anti-spam & Security WordPress plugin before 7.3.1 does not properly checks HTTP headers in order to validate the origin IP address, allowing threat actors to bypass it's block feature by spoofing the headers.

Affected

Titan Anti-spam & Security

CVSS v3.1 NVD

5.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

EPSS

0.76% chance of exploitation in the next 30 days, 54th percentile

Published

2022-09-16

Updated

2024-08-03

Proof-of-concept exploits (1)

• https://wpscan.com/vulnerability/f1af4267-3a43-4b88-a8b9-c1d5b2aa9d68

References

• CVE Record
• NVD entry