GCVE - cpe:2.3:a:wpcerber:cerber_security_antispam_\&_malware

Approved changes feed: RSS · Atom

cpe:2.3:a:wpcerber:cerber_security_antispam_\&_malware_scan:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

Vendor	Wpcerber (`65a44a9b-125f-52ce-859b-be796257483b`)
Product	Cerber Security Antispam & Malware Scan (`f6f5367e-503e-5d83-bfe2-16c9ba6b53f4`)
Edition	*
Language	*
Software edition	*
Target software	wordpress
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-4100`	vulnerable	2026-06-08 05:51:36.754427	WP Cerber Security <= 9.4 - IP Protection Bypass MEDIUM (5.3) The WP Cerber Security plugin for WordPress is vulnerable to IP Protection bypass in versions up to, and including 9.4 due to the plugin improperly checking for a visitor's IP address. This makes it possible for an attacker whose IP address has been blocked to bypass this control by setting the X-Forwarded-For: HTTP header to an IP Address that hasn't been blocked. Published: 2024-08-31T08:35:05.543Z Updated: 2026-04-08T16:33:01.395Z Open on db.gcve.eu Reference links https://www.wordfence.com/threat-intel/vulnerabilities/id/03ccd474-42f4-4cbb-823e-93fe4db1bf80?source=cve https://plugins.trac.wordpress.org/changeset/2865322/wp-cerber/trunk/cerber-common.php	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-10990`	vulnerable	2026-06-08 05:07:25.932840	Details available The wp-cerber plugin before 2.7 for WordPress has XSS via the X-Forwarded-For HTTP header. Published: 2019-09-17T14:30:32.000Z Updated: 2024-08-06T03:47:33.327Z Open on db.gcve.eu Reference links https://wpvulndb.com/vulnerabilities/8430 https://wordpress.org/plugins/wp-cerber/#developers	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.