CVE-2022-2877 - Titan Anti-spam & Security < 7.3.1 - Protection Bypass due to IP Spoofing

Back Back to CVE browser

MEDIUM

Titan Anti-spam & Security < 7.3.1 - Protection Bypass due to IP Spoofing

Published Sep 16, 2022

5.3

MEDIUM

CVSS 3.1

EPSS 0.76%

Description

The Titan Anti-spam & Security WordPress plugin before 7.3.1 does not properly checks HTTP headers in order to validate the origin IP address, allowing threat actors to bypass it's block feature by spoofing the headers.

Affected products

Vendor n/a Product Titan Anti-spam & Security Default
unknown
Affected
- ≥ 7.3.1, < 7.3.1

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
n/a	Titan Anti-spam & Security	unknown	Affected ≥ 7.3.1, < 7.3.1

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-639

Authorization Bypass

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-35109
Advisory
https://wpscan.com/vulnerability/f1af4267-3a43-4b88-a8b9-c1d5b2aa9d68
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-35109		Advisory
https://wpscan.com/vulnerability/f1af4267-3a43-4b88-a8b9-c1d5b2aa9d68		x_refsource_MISCExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner WPScan

Published Sep 16, 2022

Updated Aug 3, 2024

Reserved Aug 17, 2022

Link CVE-2022-2877

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-2877

Red Hat

No data

ENISA EUVD

Assigner WPScan

Published Sep 16, 2022

Updated Aug 3, 2024

Link EUVD-2022-35109

GitHub

No data