{"id":3400,"date":"2024-04-01T17:45:10","date_gmt":"2024-04-01T17:45:10","guid":{"rendered":"http:\/\/127.0.0.1\/secupress-free-wordpress-security-2-2-5-1-cross-site-request-forgery-hacia-una-ip-baneada\/"},"modified":"2024-04-01T17:45:10","modified_gmt":"2024-04-01T17:45:10","slug":"secupress-free-wordpress-security-2-2-5-1-cross-site-request-forgery-hacia-una-ip-baneada","status":"publish","type":"post","link":"http:\/\/127.0.0.1\/secupress-free-wordpress-security-2-2-5-1-cross-site-request-forgery-hacia-una-ip-baneada\/","title":{"rendered":"SecuPress Free \u2014 WordPress Security <= 2.2.5.1 – Cross-Site Request Forgery hacia una IP Baneada"},"content":{"rendered":"
<\/p>\n
El plugin SecuPress Free \u2014 WordPress Security para WordPress es vulnerable a Cross-Site Request Forgery en todas las versiones hasta, e incluyendo, la 2.2.5.1. Esto se debe a la falta o incorrecta validaci\u00f3n de nonce en la funci\u00f3n secupress_blackhole_ban_ip(). Esto permite a atacantes no autenticados bloquear la IP de un usuario mediante una solicitud falsificada, […]<\/p>\n","protected":false},"author":0,"featured_media":0,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[1111],"class_list":["post-3400","post","type-post","status-publish","format-standard","hentry","category-uncategorized","tag-cve-2024-1504"],"yoast_head":"\n