Lucene search

K
nvd[email protected]NVD:CVE-2024-3050
HistoryMay 29, 2024 - 6:18 a.m.

CVE-2024-3050

2024-05-2906:18:32
web.nvd.nist.gov
wordpress
site reviews
ip manipulation

9.4 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

The Site Reviews WordPress plugin before 7.0.0 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its value. This may be used to bypass IP-based blocking

9.4 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%