5.3
Moyenne
CVE-2022-1613 The Restricted Site Access WordPress plugin before 7.3.2 prioritizes getting a visitor's IP from certain HTTP headers…
Description
The Restricted Site Access WordPress plugin before 7.3.2 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTE_ADDR, which makes it possible to bypass IP-based limitations in certain situations.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Restricted Site Access 7.3 | premières → < 7.3.2 | 7.3.2 |