Lucene search
Daniel RufWPVDB-ID:F6D3408C-2CEB-4A89-822B-13F5272A5FCEHistoryAug 04, 2023 - 12:00 a.m.
User Access Manager < 2.2.18 - IP Spoofing
2023-08-0400:00:00
Daniel Ruf
wpscan.com
3
ip spoofing
user access manager
http headers
remote_addr
attacker
restricted content
0.0005 Low
EPSS
Percentile
17.1%
Description The plugin prioritizes getting a visitor’s IP from certain HTTP headers over PHP’s REMOTE_ADDR, which makes it possible for attackers to access restricted content in certain situations.
PoC
Set HTTP_X_REAL_IP which is used in checkUserGroupAccess() to use an IP from the allowlist.
| CPE | Name | Operator | Version |
|---|---|---|---|
| user-access-manager | eq | 2.2.18 |
Related
wpexploit
wpexploit
User Access Manager < 2.2.18 - IP Spoofing
2023-08-04 00:00:00
nvd
nvd
CVE-2022-1601
2023-08-30 15:15:08
prion
prion
Code injection
2023-08-30 15:15:00
cvelist
cvelist
CVE-2022-1601 User Access Manager < 2.2.18 - IP Spoofing
2023-08-30 14:22:04
cve
cve
CVE-2022-1601
2023-08-30 15:15:08
wordfence
wordfence