WordPress Plugin Vulnerabilities

iQ Block Country < 1.2.20 - Protection Bypass due to IP Spoofing

Description

The plugin does not properly checks HTTP headers in order to validate the origin IP address, allowing threat actors to bypass it's block feature by spoofing the headers.

Proof of Concept

curl -i -H 'CF-CONNECTING-IP: 0.0.0.0' https://example.com

Affects Plugins

Plugin icon
iq-block-country
Fixed in 1.2.20

References

CVE
CVE-2022-1762

Miscellaneous

Original Researcher
Daniel Ruf
Submitter
Daniel Ruf
Submitter website
https://daniel-ruf.de
Verified
Yes
WPVDB ID
03254977-37cc-4365-979b-326f9637be85

Timeline

Publicly Published
2022-05-17 (about 1 years ago)
Added
2022-05-17 (about 1 years ago)
Last Updated
2023-04-04 (about 1 years ago)

Other

Published
Title
Published
2020-01-21
Title
WordPress <= 5.2.3 - Hardening Bypass
Published
2015-11-11
Title
BuddyPress <= 2.3.4 - Authenticated Privilege Escalation
Published
2022-10-31
Title
WP-Polls < 2.76.0 - IP Validation Bypass
Published
2024-04-22
Title
Appointment Hour Booking < 1.4.57 - Captcha Bypass
Published
2015-01-22
Title
Pagelines Theme <= 1.4.5 - Privilege escalation