Vulnerability · Published Jun 21, 2024 · Assigned by Patchstack
CVE-2022-44593WordPress Solid Security plugin <= 9.3.1 - IP Spoofing Leading to Denial of Service vulnerability
Low 3.7
In plain English
A low-severity security flaw in Solid Security from SolidWP. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 18% of all known vulnerabilities).
Severity (CVSS 3.1)3.7Low
Exploit odds (30 days)0.3%top 82.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Use of Less Trusted Source vulnerability in SolidWP Solid Security allows HTTP DoS.This issue affects Solid Security: from n/a through 9.3.1.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| SolidWP | Solid Security | n/a – through 9.3.1 |
Weakness: CWE-348 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L