Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-1601
HistoryAug 30, 2023 - 3:15 p.m.

Code injection

2023-08-3015:15:00
PRIOn knowledge base
www.prio-n.com
2
user access manager
wordpress plugin
code injection
security vulnerability
restricted content

5.4 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.1%

The User Access Manager WordPress plugin before 2.2.18 prioritizes getting a visitor’s IP from certain HTTP headers over PHP’s REMOTE_ADDR, which makes it possible for attackers to access restricted content in certain situations.

CPENameOperatorVersion
user_access_managerlt2.2.18

5.4 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.1%

Related for PRION:CVE-2022-1601