Security Advisory

CVE-2024-3050

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-05-29 06:00:01

Last updated 2024-08-01 19:32:42

Assigner WPScan

State PUBLISHED

Description

The Site Reviews WordPress plugin before 7.0.0 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its value. This may be used to bypass IP-based blocking

← Browse all CVEs View on cve.org ↗