CVE-2022-4097

CVE-2022-4097 describes an IP spoofing vulnerability in the All-In-One Security (AIOS) WordPress plugin prior to version 5.0.8. This medium-severity vulnerability (CVSS 5.3) allows attackers to bypass security features such as IP blocking, rate limiting, and brute force protection by spoofing their IP address. While the attack complexity is low and requires no user interaction, the potential impact is limited to integrity, as it primarily facilitates bypassing existing security controls. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.