CVE-2024-0970 — User Activity Tracking and Log < 4.1.4 - IP Spoofing

CVE-2024-0970

User Activity Tracking and Log < 4.1.4 - IP Spoofing PUBLISHED

Description (CNA)

This User Activity Tracking and Log WordPress plugin before 4.1.4 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its value.

Affected (CNA)

Vendor / product	Versions
Unknown / User Activity Tracking and Log	affected 0 before 4.1.4

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/7df6877c-6640-41be-aacb-20c7da61e4db/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.