CVE-2022-4303

The WP Limit Login Attempts WordPress plugin through 2.6.4 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTEADDR, which makes it possible to bypass IP-based restrictions on login forms...

PT-2022-11581 · Unknown · Rsfirewall

Name of the Vulnerable Software and Affected Versions: RSFirewall affected versions not specified Description: The issue is related to how RSFirewall attempts to identify the original IP address by examining different HTTP headers. A bypass is possible due to the implementation of this...