coreActivity: Activity Logging plugin for WordPress, CVE-2024-0868

CVE, Research URL: CVE-2024-0868
Home page URL: Security reports for coreActivity: Activity Logging plugin for WordPress
Application: coreActivity: Activity Logging plugin for WordPress
Published on: Apr 17, 2024
Research Description: The coreActivity: Activity Logging plugin for WordPress plugin before 2.1 retrieved IP addresses of requests via headers such X-FORWARDED to log them, allowing users to spoof them by providing an arbitrary value
Affected versions: max 2.1.
Status: vulnerable