5.3

CVE-2022-1601

Exploit

User Access Manager < 2.2.18 - IP Spoofing

User Access Manager <= 2.2.16 - IP Spoofing

The User Access Manager WordPress plugin before 2.2.18 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTE_ADDR, which makes it possible for attackers to access restricted content in certain situations.
Mögliche Gegenmaßnahme
User Access Manager: Update to version 2.2.18, or a newer patched version
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Alexanderschneider ≫ User Access Manager SwPlatformwordpress Version < 2.2.18
Weitere Schwachstelleninformationen
SystemWordPress Plugin
≫
Produkt User Access Manager
Version *-2.2.16
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.58% 0.432
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.3 3.9 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://wpscan.com/vulnerability/f6d3408c-2ceb-4a89-822b-13f5272a5fce
Third Party Advisory
Exploit
https://www.wordfence.com/threat-intel/vulnerabilities/id/88c5752c-ef4e-4343-810e-ecf1f33d3538
Third Party Advisory