CVE-2024-3050

critical

Description

The Site Reviews WordPress plugin before 7.0.0 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its value. This may be used to bypass IP-based blocking

References

https://wpscan.com/vulnerability/04c1581e-fd36-49d4-8463-b49915d4b1ac/

Details

Source: Mitre, NVD

Published: 2024-05-29

Updated: 2025-05-21

Risk Information

CVSS v2

Base Score: 6.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 9.1

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Severity: Critical

EPSS

EPSS: 0.00485

Detections

Analytics