CVE-2024-0868

2024-04-1705:15:48

[email protected]

web.nvd.nist.gov

wordpress

activity logging

ip spoofing

vulnerability

7.2 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

8.4%

JSON

The coreActivity: Activity Logging plugin for WordPress plugin before 2.1 retrieved IP addresses of requests via headers such X-FORWARDED to log them, allowing users to spoof them by providing an arbitrary value

VendorProductVersionCPE
wordpressplugin_newsletter_plugin*cpe:2.3:a:wordpress:plugin_newsletter_plugin:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
wordpress	plugin_newsletter_plugin	*	cpe:2.3:a:wordpress:plugin_newsletter_plugin::::::::

References

wpscan.com/vulnerability/bb7c2d2b-cdfe-433b-96cf-714e71d12b22/