Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-r63x-g9j6-p7xh

Опубликовано: 30 авг. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

The User Access Manager WordPress plugin before 2.2.18 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTE_ADDR, which makes it possible for attackers to access restricted content in certain situations.

The User Access Manager WordPress plugin before 2.2.18 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTE_ADDR, which makes it possible for attackers to access restricted content in certain situations.

EPSS

Процентиль: 31%
0.00115
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-290

Связанные уязвимости

CVSS3: 5.3
nvd
больше 2 лет назад

The User Access Manager WordPress plugin before 2.2.18 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTE_ADDR, which makes it possible for attackers to access restricted content in certain situations.

EPSS

Процентиль: 31%
0.00115
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-290