Files
CVEs-PoC/2022/CVE-2022-4746.md
T
2024-06-18 02:51:15 +02:00

760 B

CVE-2022-4746

Description

The FluentAuth WordPress plugin before 1.0.2 prioritizes getting a visitor's IP address from certain HTTP headers over PHP's REMOTE_ADDR, which makes it possible to bypass the IP-based blocks set by the plugin.

POC

Reference

Github

No PoCs found on GitHub currently.