PT-2026-97156 · WordPress · Divi-Dash
CVSS v3.1
8.2
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H |
Name of the Vulnerable Software and Affected Versions
divi-dash WordPress plugin versions prior to 1.0.7
Description
The plugin fails to validate the source of the client IP address used for rate limiting and banning. This allows unauthenticated attackers to spoof arbitrary IP addresses to bypass rate limiting, ban specific addresses, and cause a stored option to grow without bound, leading to a denial of service.
Recommendations
Update divi-dash WordPress plugin to version 1.0.7 or later.
Exploit
Fix
DoS
Resource Exhaustion
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Divi-Dash