cleantalk
Vulnerabilities and Security Researches

Security & Malware scan by CleanTalk, CVE-2023-5239

CVE, Research URL

CVE-2023-5239

Published on
Nov 27, 2023
Research Description
The Security & Malware scan by CleanTalk WordPress plugin before 2.121 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its value. This may be used to bypass bruteforce protection.
Affected versions
max 2.121.
Status
vulnerable