5.3
Moyenne
CVE-2024-0970 This User Activity Tracking and Log WordPress plugin before 4.1.4 retrieves client IP addresses from potentially…
Description
This User Activity Tracking and Log WordPress plugin before 4.1.4 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its value.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| User Activity Tracking and Log 4.1 | premières → < 4.1.4 | 4.1.4 |