vulnerability
WordPress Plugin: rsfirewall: CVE-2021-4226: Use of Less Trusted Source
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 6 | (AV:N/AC:L/Au:N/C:P/I:P/A:N) | Apr 13, 2022 | May 15, 2025 | Jul 10, 2025 |
Severity
6
CVSS
(AV:N/AC:L/Au:N/C:P/I:P/A:N)
Published
Apr 13, 2022
Added
May 15, 2025
Modified
Jul 10, 2025
Description
The RSFirewall! plugin for WordPress is vulnerable to IP Address Spoofing in versions less than and equal to 1.1.24 due to insufficient IP address validation. This makes it possible for attackers to bypass blocks and access services they should not be able to.
Solution
rsfirewall-plugin-cve-2021-4226
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.