Lucene search

K
wpexploitRezadutyWPEX-ID:A1179959-2044-479F-A5CA-3C9FFC46D00E
HistoryFeb 03, 2023 - 12:00 a.m.

User Activity <= 1.0.1 - IP Spoofing

2023-02-0300:00:00
rezaduty
45
ip spoofing
security logging
monitoring failures

0.001 Low

EPSS

Percentile

29.6%

The plugin checks headers such as the X-Forwarded-For to retrieve the IP address of the request, which could lead to IP spoofing

1. Send login request with x-forwarded-for: [REDACTED_IP]

2. Show spoofed IP address in the dashboard (OWASP A09:2021 – Security Logging and Monitoring Failures)

0.001 Low

EPSS

Percentile

29.6%

Related for WPEX-ID:A1179959-2044-479F-A5CA-3C9FFC46D00E