← CVE Intelligence

CVE-2022-4746

FluentAuth < 1.0.2 - Bypass blocks by IP Spoofing PUBLISHED

Description (CNA)

The FluentAuth WordPress plugin before 1.0.2 prioritizes getting a visitor's IP address from certain HTTP headers over PHP's REMOTE_ADDR, which makes it possible to bypass the IP-based blocks set by the plugin.

Affected (CNA)

Vendor / productVersions
Unknown / FluentAuthaffected 0 before 1.0.2

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.