Lucene search
WpvulndbWPVDB-ID:86A2FCFF-616B-4D3B-8428-B6D2E4A3264CHistoryJan 12, 2024 - 12:00 a.m.
Wp Ultimate Review <= 2.3.2 - IP Spoofing
2024-01-1200:00:00
wpscan.com
3
wp ultimate review
ip spoofing
vulnerability
insufficient ip address validation
unauthenticated attackers
rate limiting
Description The plugin is vulnerable to IP Address Spoofing due to insufficient IP address validation and/or use of user-supplied HTTP headers as a primary method for IP retrieval. This makes it possible for unauthenticated attackers to bypass IP rate limiting.
Related
cvelist
cvelist
cve
cve
CVE-2024-21746
2024-05-17 09:15:20
nvd
nvd
CVE-2024-21746
2024-05-17 09:15:20
vulnrichment
vulnrichment
wordfence
wordfence
9.4 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.1%
Related for WPVDB-ID:86A2FCFF-616B-4D3B-8428-B6D2E4A3264C