CVE-2022-2877: Titan Anti-spam & Security < 7.3.1 - Protection Bypass due to IP Spoofing
The Titan Anti-spam & Security WordPress plugin before 7.3.1 does not properly checks HTTP headers in order to validate the origin IP address, allowing threat actors to bypass it's block feature by spoofing the headers.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for the Titan Anti-spam & Security WordPress plugin?
The vulnerability ID for the Titan Anti-spam & Security WordPress plugin is CVE-2022-2877.
What is the severity of CVE-2022-2877?
The severity of CVE-2022-2877 is medium with a CVSS score of 5.3.
What is the affected software for CVE-2022-2877?
The affected software for CVE-2022-2877 is the Titan Anti-spam & Security WordPress plugin before version 7.3.1.
What is the vulnerability description of CVE-2022-2877?
CVE-2022-2877 is a vulnerability in the Titan Anti-spam & Security WordPress plugin that allows threat actors to bypass the block feature by spoofing HTTP headers.
How do I fix CVE-2022-2877?
To fix CVE-2022-2877, upgrade to version 7.3.1 or later of the Titan Anti-spam & Security WordPress plugin.