7.5

CVE-2023-5133

Exploit

User Activity Log Pro < 2.3.4 - IP Spoofing

User Activity Log Pro <= 2.3.3 - Tracking Bypass via IP Spoofing

This user-activity-log-pro WordPress plugin before 2.3.4 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its value. This may be used to hide the source of malicious traffic.
Mögliche Gegenmaßnahme
User Activity Log Pro: Update to version 2.3.4, or a newer patched version
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Solwininfotech ≫ User Activity Log SwEditionpro SwPlatformwordpress Version < 2.3.4
Weitere Schwachstelleninformationen
SystemWordPress Plugin
≫
Produkt User Activity Log Pro
Version *-2.3.3
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.55% 0.416
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
134c704f-9b21-4f2e-91b3-4a467353bcc0 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://wpscan.com/vulnerability/36c30e54-75e4-4df1-b01a-60c51c0e76a3
Third Party Advisory
Exploit
https://www.wordfence.com/threat-intel/vulnerabilities/id/9666913e-55a3-441c-85ef-8a12756e37ba
Third Party Advisory