CVE-2022-4097
Assigner: WPScan
Published: 2022-12-12T17:54:35.126Z
State: PUBLISHED
title: All In One WP Security & Firewall < 5.0.8 - IP Spoofing
problemTypes: descriptions: description: CWE-639 Authorization Bypass Through User-Controlled Key
type: CWE
affected: vendor: Unknown
product: All-In-One Security (AIOS)
collectionURL: https://wordpress.org/plugins
versions: status: affected
versionType: custom
version: 0
lessThan: 5.0.8
defaultStatus: unaffected
descriptions: value: The All-In-One Security (AIOS) WordPress plugin before 5.0.8 is susceptible to IP Spoofing attacks, which can lead to bypassed security features (like IP blocks, rate limiting, brute force protection, and more).
credits: value: Daniel Ruf
type: finder
source: discovery: EXTERNAL
x_generator: engine: WPScan CVE Generator