Skip to content
OpenAdvisories

Weakness (CWE)

CWE-348: Use of Less Trusted Source

Base Draft

The product has two different sources of the same data or information, but it uses the source that has less support for verification, is less trusted, or is less resistant to attack.

Source: MITRE CWE-348

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2022-4539 Public exploit

    Web Application Firewall <= 2.1.2 - IP Address Spoofing to Protection Mechanism Bypass

    The Web Application Firewall plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 2.1.2. This is due to insufficient restrictions on where the IP Address information is being retrieved for request logging and login restr…

    cyberlord92 Web Application Firewall – website security Web / CMS