Themes Vulnerabilities

Restricted Site Access <= 7.4.1 - IP Spoofing to Protection Mechanism Bypass

Description

The Restricted Site Access plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 6.3.0. This is due to insufficient restrictions on where the IP Address information is being retrieved for user IP Addresses. This makes it possible for attackers to gain access to areas of the site that may have been restricted.

Affects Themes

References

Miscellaneous

Original Researcher
Mika
Verified
No

Timeline

Publicly Published
2023-11-27 (about 2 years ago)
Added
2023-12-01 (about 2 years ago)
Last Updated
2024-01-22 (about 2 years ago)

Other