https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 14:53:36 +0000 https://cve.radiocsirt.org/vuln/cnvd-2025-27336 cnvd-2025-27336 https://cve.radiocsirt.org/vuln/cnvd-2025-27336 https://cve.radiocsirt.org/vuln/euvd-2026-287494 EUVD-2026-287494 https://cve.radiocsirt.org/vuln/euvd-2026-287494 https://cve.radiocsirt.org/vuln/fkie_cve-2025-12094 <p>The OOPSpam Anti-Spam: Spam Protection for WordPress Forms &amp; Comments (No CAPTCHA) plugin for WordPress is vulnerable to IP Header Spoofing in all versions up to, and including, 1.2.53. This is due to the plugin trusting client-controlled forwarded headers (such as CF-Connecting-IP, X-Forwarded-For, and others) without verifying that those headers originate from legitimate, trusted proxies. This makes it possible for unauthenticated attackers to spoof their IP address and bypass IP-based security controls, including blocked IP lists and rate limiting protections, by sending arbitrary HTTP headers with their requests.</p> <p>The OOPSpam Anti-Spam: Spam Protection for WordPress Forms &amp; Comments (No CAPTCHA) plugin for WordPress is vulnerable to IP Header Spoofing in all versions up to, and including, 1.2.53. This is due to the plugin trusting client-controlled forwarded headers (such as CF-Connecting-IP, X-Forwarded-For, and others) without verifying that those headers originate from legitimate, trusted proxies. This makes it possible for unauthenticated attackers to spoof their IP address and bypass IP-based security controls, including blocked IP lists and rate limiting protections, by sending arbitrary HTTP headers with their requests.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-12094 https://cve.radiocsirt.org/vuln/ghsa-4qw6-7g5m-4mvh <p>The OOPSpam Anti-Spam: Spam Protection for WordPress Forms &amp; Comments (No CAPTCHA) plugin for WordPress is vulnerable to IP Header Spoofing in all versions up to, and including, 1.2.53. This is due to the plugin trusting client-controlled forwarded headers (such as CF-Connecting-IP, X-Forwarded-For, and others) without verifying that those headers originate from legitimate, trusted proxies. This makes it possible for unauthenticated attackers to spoof their IP address and bypass IP-based security controls, including blocked IP lists and rate limiting protections, by sending arbitrary HTTP headers with their requests.</p> <p>The OOPSpam Anti-Spam: Spam Protection for WordPress Forms &amp; Comments (No CAPTCHA) plugin for WordPress is vulnerable to IP Header Spoofing in all versions up to, and including, 1.2.53. This is due to the plugin trusting client-controlled forwarded headers (such as CF-Connecting-IP, X-Forwarded-For, and others) without verifying that those headers originate from legitimate, trusted proxies. This makes it possible for unauthenticated attackers to spoof their IP address and bypass IP-based security controls, including blocked IP lists and rate limiting protections, by sending arbitrary HTTP headers with their requests.</p> https://cve.radiocsirt.org/vuln/ghsa-4qw6-7g5m-4mvh