Description

The Site Reviews WordPress plugin before 7.0.0 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its value. This may be used to bypass IP-based blocking

INFO

Published Date :

2024-05-29T06:00:01.923Z

Last Modified :

2024-08-01T19:32:42.587Z

Source :

WPScan
AFFECTED PRODUCTS

The following products are affected by CVE-2024-3050 vulnerability.

Vendors Products
Geminilabs
  • Site Reviews
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-3050.

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact