← CVE Intelligence

CVE-2022-1601

User Access Manager < 2.2.18 - IP Spoofing PUBLISHED

Description (CNA)

The User Access Manager WordPress plugin before 2.2.18 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTE_ADDR, which makes it possible for attackers to access restricted content in certain situations.

Affected (CNA)

Vendor / productVersions
Unknown / User Access Manageraffected 0 before 2.2.18

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.