Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-ppp4-p6wj-8gp8

Опубликовано: 04 мар. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

The Admin and Site Enhancements (ASE) WordPress plugin before 7.6.10 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate their value to bypass the login limit feature in the Admin and Site Enhancements (ASE) WordPress plugin before 7.6.10.

The Admin and Site Enhancements (ASE) WordPress plugin before 7.6.10 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate their value to bypass the login limit feature in the Admin and Site Enhancements (ASE) WordPress plugin before 7.6.10.

EPSS

Процентиль: 35%
0.00148
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-290

Связанные уязвимости

CVSS3: 5.3
nvd
11 месяцев назад

The Admin and Site Enhancements (ASE) WordPress plugin before 7.6.10 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate their value to bypass the login limit feature in the Admin and Site Enhancements (ASE) WordPress plugin before 7.6.10.

EPSS

Процентиль: 35%
0.00148
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-290