5.3
Medium
CVE-2022-1613 The Restricted Site Access WordPress plugin before 7.3.2 prioritizes getting a visitor's IP from certain HTTP headers…
Description
The Restricted Site Access WordPress plugin before 7.3.2 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTE_ADDR, which makes it possible to bypass IP-based limitations in certain situations.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Restricted Site Access 7.3 | earliest → < 7.3.2 | 7.3.2 |