Themes Vulnerabilities
Restricted Site Access <= 7.4.1 - IP Spoofing to Protection Mechanism Bypass
Description
The Restricted Site Access plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 6.3.0. This is due to insufficient restrictions on where the IP Address information is being retrieved for user IP Addresses. This makes it possible for attackers to gain access to areas of the site that may have been restricted.
Affects Themes
References
Miscellaneous
Original Researcher
Mika
Verified
No
WPVDB ID
Timeline
Publicly Published
2023-11-27 (about 2 years ago)
Added
2023-12-01 (about 2 years ago)
Last Updated
2024-01-22 (about 2 years ago)