2022-09-26 12:35:30
WPScan
PUBLISHED
The Restricted Site Access WordPress plugin before 7.3.2 prioritizes getting a visitors IP from certain HTTP headers over PHPs REMOTE_ADDR, which makes it possible to bypass IP-based limitations in certain situations.