WP Photo Album Plus < 8.6.01.005 - IP Spoofing

2023-12-1300:00:00

wpscan.com

plugin

ip spoofing

security bypass

vulnerability

9.4 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Description The plugin does not properly check for IP addresses, allowing attackers to spoof IP addresses via headers and bypass the login protection offered by the plugin

CPENameOperatorVersion
eq8.6.01.005

CPE	Name	Operator	Version
		eq	8.6.01.005

References

patchstack.com/database/vulnerability/wp-photo-album-plus/wordpress-wp-photo-album-plus-plugin-8-5-02-005-ip-bypass-vulnerability