Threats tagged 'ghsa-hx9j-f48g-rh4h'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-119039The Defender Security WordPress plugin before 6.4.1 does not verify that the client IP address it derives for its High2026-11-12GCVE DatabaseCVE-2026-119039 The Defender Security WordPress plugin versions before 6.4.1 improperly trust user-supplied IP address values without verifying their source. This flaw allows unauthenticated attackers to spoof IP addresses, bypass IP-based protections such as login lockout and IP banning, impersonate allowlisted IPs, and corrupt activity logs. Report on CVE-2026-119039 Vulnerability #ghsa-hx9j-f48g-rh4h	GCVE Database	2026-11-12

Page 1 of 1