exploitDog

CVE-2022-2913

Опубликовано: 16 сент. 2022

Источник: nvd

CVSS3: 4.3

EPSS Низкий

Описание

The Login No Captcha reCAPTCHA WordPress plugin before 1.7 doesn't check the proper IP address allowing attackers to spoof IP addresses on the allow list and bypass the need for captcha on the login screen.

Ссылки

https://wpscan.com/vulnerability/5231ac18-ea9a-4bb9-af9f-e3d95a3b54f1
Exploit
Patch
Third Party Advisory
https://wpscan.com/vulnerability/5231ac18-ea9a-4bb9-af9f-e3d95a3b54f1
Exploit
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:login_no_captcha_recaptcha_project:login_no_captcha_recaptcha:*:*:*:*:*:wordpress:*:*

Версия до 1.7 (исключая)

EPSS

Процентиль: 54%

0.00757

Низкий

4.3 Medium

CVSS3

Дефекты

CWE-639

Связанные уязвимости

GHSA-36wc-4prf-gp6g

CVSS3: 4.3

github

около 4 лет назад

The Login No Captcha reCAPTCHA WordPress plugin before 1.7 doesn't check the proper IP address allowing attackers to spoof IP addresses on the allow list and bypass the need for captcha on the login screen.

EPSS

Процентиль: 54%

0.00757

Низкий

4.3 Medium

CVSS3

Дефекты

CWE-639