CVE-2023-4279

HIGH

7.5

Beschreibung

This User Activity Log WordPress plugin before 1.6.7 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its value. This may be used to hide the source of malicious traffic.

CVE Details

CVSS v3.1 Bewertung7.5

SchweregradHIGH

CVSS VektorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

AngriffsvektorNETWORK

KomplexitatLOW

Erforderliche PrivilegienNONE

BenutzerinteraktionNONE

Veroffentlicht9/4/2023

Zuletzt geandert4/23/2025

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

solwininfotech:user_activity_log

Referenzen

https://wpscan.com/vulnerability/2bd2579e-b383-4d12-b207-6fc32cfb82bc(contact@wpscan.com)

https://wpscan.com/vulnerability/2bd2579e-b383-4d12-b207-6fc32cfb82bc(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.