CVE-2024-3050

The Site Reviews WordPress plugin before 7.0.0 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its value. This may be used to bypass IP-based blocking

Score

CVSS 3.1 9.1 Critical

Status

Analyzed - contact@wpscan.com

Published

2024-05-29

Last modified

2024-08-01

Affected products

• Site Reviews (Geminilabs)
• Site Reviews (Paul Ryley)
• Site Reviews (Unknown)

References

• https://wpscan.com/vulnerability/04c1581e-fd36-49d4-8463-b49915d4b1ac/