7.5
Élevée
CVE-2022-4746 The FluentAuth WordPress plugin before 1.0.2 prioritizes getting a visitor's IP address from certain HTTP headers over…
Description
The FluentAuth WordPress plugin before 1.0.2 prioritizes getting a visitor's IP address from certain HTTP headers over PHP's REMOTE_ADDR, which makes it possible to bypass the IP-based blocks set by the plugin.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| FluentAuth 1.0 | premières → < 1.0.2 | 1.0.2 |