WordPress Plugin Vulnerabilities

Maspik – Spam blacklist < 0.10.4 - IP Validation Bypass

Description

The plugin does not properly validates IP addresses, allowing unauthenticated attackers to bypass IP-based restrictions

Affects Plugins

Plugin icon
contact-forms-anti-spam
Fixed in 0.10.4

References

CVE
CVE-2023-48271
URL
https://patchstack.com/database/vulnerability/contact-forms-anti-spam/wordpress-maspik-spam-blacklist-plugin-0-9-2-ip-filtering-bypass-vulnerability

Classification

Type
SPOOFING
OWASP top 10
A5: Broken Access Control
CWE
CWE-290
CVSS
5.3 (medium)

Miscellaneous

Original Researcher
Mika
Verified
No
WPVDB ID
9a48af08-b8c7-48be-9288-8e11c0e71d6c

Timeline

Publicly Published
2023-11-21 (about 2 years ago)
Added
2023-12-12 (about 2 years ago)
Last Updated
2023-12-12 (about 2 years ago)

Other

Published
Title
Published
2024-08-16
Title
LOGIN AND REGISTRATION ATTEMPTS LIMIT<= 2.1 - IP Address Spoofing to Protection Mechanism Bypass
Published
2024-03-27
Title
coreActivity < 2.1 - Unauthenticated IP Spoofing
Published
2024-09-16
Title
Maintenance Redirect < 2.1.0 - IP Spoofing to Maintenance Mode Bypass
Published
2023-12-29
Title
Malware Scanner < 4.7.2 - IP Spoofing
Published
2026-01-06
Title
AA Block country <= 1.0.1 - Unauthenticated IP Address Spoofing via X-Forwarded-For Header