WordPress Manutenção <= 1.0.6 - IP Spoofing to Maintenance Mode Bypass
mediumThe WordPress Manutenção plugin for WordPress is vulnerable to IP Spoofing in all versions up to, and including, 1.0.6. This is due to insufficient validation of IP addresses. This makes it possible for unauthenticated attackers to bypass the plugin's maintenance mode restriction via the 'X-Forwarded-For' HTTP header.
- CVSS:
- 5.3
- Affected:
- up to 1.0.6
- Fixed in:
- 1.0.7
- Disclosed:
- Jan 10, 2024