Skip to content
OpenAdvisories

Archive

4 September 2023

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • High 7.5
    CVE-2023-4279 Public exploit

    User Activity Log < 1.6.7 - IP Spoofing

    This User Activity Log WordPress plugin before 1.6.7 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its value. This may be used to hide the source of malicious traffic.