WordPress User Activity Tracking and Log plugin < 4.1.4 - IP Spoofing vulnerability

IP Spoofing vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin User Activity Tracking and Log versions 4.1.4...

CVE-2024-0970 User Activity Tracking and Log < 4.1.4 - IP Spoofing

This User Activity Tracking and Log WordPress plugin before 4.1.4 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its value...

CVE-2024-0970

The User Activity Tracking and Log WordPress plugin, in versions prior to 4.1.4 , is vulnerable to an IP Spoofing issue. The root cause is that the plugin retrieves client IP addresses from potentially untrusted headers, which allows an attacker to manipulate the captured IP value. To remediate t...