CVE-2023-4800

CVE ID: CVE-2023-4800 Vulnerability Type: संवेदनशील डेटा का अनावरण Description: DoLogin Security प्लगइन WordPress के लिए डैशबोर्ड विजेट में क्षमता जाँच की कमी के कारण, संस्करण 3.7 तक और इसमें शामिल, डेटा तक अनधिकृत पहुँच की अनुमति देता है। इससे प्रमाणित हमलावरों के लिए लॉगिन प्रयास लॉग देखना संभव...

DoLogin Security < 3.7 - IP Spoofing

Description The plugin uses headers such as the X-Forwarded-For to retrieve the IP address of the request, which could lead to IP spoofing. PoC 1. Send login request with x-forwarded-for: REDACTEDIP 2. See spoofed IP address in the "Login Attempts Log"...

DoLogin Security < 3.7 - IP Spoofing

Description The plugin uses headers such as the X-Forwarded-For to retrieve the IP address of the request, which could lead to IP spoofing. 1. Send login request with x-forwarded-for: REDACTEDIP 2. See spoofed IP address in the "Login Attempts Log"...