CVE-2023-35764

Survey Maker <= 4.0.9 - IP Address Spoofing

mediumUse of Less Trusted Source

5.3

CVSS Score

5.3

CVSS Score

medium

Severity

4.1.0

Patched in

11d

Time to patch

Description

The Survey Maker – Best WordPress Survey Plugin plugin for WordPress is vulnerable to IP Address Spoofing in all versions up to, and including, 4.0.9 due to insufficient IP address validation and/or use of user-supplied HTTP headers as a primary method for IP retrieval. This makes it possible for unauthenticated attackers to spoof their IP address.

CVSS Vector Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

None

Confidentiality

Low

Integrity

None

Availability

Technical Details

Affected versions<=4.0.9

PublishedApril 27, 2024

Last updatedMay 7, 2024

Affected pluginsurvey-maker

References

https://www.wordfence.com/threat-intel/vulnerabilities/id/ce297421-506c-4230-837e-96200677e1e2?source=api-prod

Check if your site is affected.

Run a free security audit to detect vulnerable plugins, outdated versions, and misconfigurations.

Run free audit Browse CVE database