← CVE Intelligence

CVE-2024-0868

coreActivity < 2.1 - Unauthenticated IP Spoofing PUBLISHED

Description (CNA)

The coreActivity: Activity Logging plugin for WordPress plugin before 2.1 retrieved IP addresses of requests via headers such X-FORWARDED to log them, allowing users to spoof them by providing an arbitrary value

Affected (CNA)

Vendor / productVersions
Unknown / coreActivity: Activity Logging plugin for WordPressaffected 0 before 2.1

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.