Lucene search
WPScanCVELIST:CVE-2022-1601HistoryAug 30, 2023 - 2:22 p.m.
CVE-2022-1601 User Access Manager < 2.2.18 - IP Spoofing
2023-08-3014:22:04
WPScan
www.cve.org
1
cve-2022-1601
user access manager
ip spoofing
wordpress plugin
php
remote_addr
http headers
attackers
restricted content
0.0005 Low
EPSS
Percentile
17.1%
The User Access Manager WordPress plugin before 2.2.18 prioritizes getting a visitor’s IP from certain HTTP headers over PHP’s REMOTE_ADDR, which makes it possible for attackers to access restricted content in certain situations.
CNA Affected
[
{
"vendor": "Unknown",
"product": "User Access Manager",
"versions": [
{
"status": "affected",
"versionType": "custom",
"version": "0",
"lessThan": "2.2.18"
}
],
"defaultStatus": "unaffected",
"collectionURL": "https://wordpress.org/plugins"
}
]Related
wpvulndb
wpvulndb
User Access Manager < 2.2.18 - IP Spoofing
2023-08-04 00:00:00
wpexploit
wpexploit
User Access Manager < 2.2.18 - IP Spoofing
2023-08-04 00:00:00
nvd
nvd
CVE-2022-1601
2023-08-30 15:15:08
prion
prion
Code injection
2023-08-30 15:15:00
cve
cve
CVE-2022-1601
2023-08-30 15:15:08
wordfence
wordfence