PT-2026-97156 · WordPress · Divi-Dash
CVSS v3.1
8.2
عالية
| المتجه | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H |
Name of the Vulnerable Software and Affected Versions
divi-dash WordPress plugin versions prior to 1.0.7
Description
The plugin fails to validate the source of the client IP address used for rate limiting and banning. This allows unauthenticated attackers to spoof arbitrary IP addresses to bypass rate limiting, ban specific addresses, and cause a stored option to grow without bound, leading to a denial of service.
Recommendations
Update divi-dash WordPress plugin to version 1.0.7 or later.
استغلال
إصلاح
DoS
Resource Exhaustion
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾
تصنيف نقاط الضعف
المعرّفات ذات الصلة
المنتجات المتأثرة
Divi-Dash