Read the docs

10up

Records23All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

10up records in CISA KEV

No 10up vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Safe Svg 4 records MEDIUM Elasticpress 2 records LOW Restricted Site Access 1 record MEDIUM Simple Local Avatars 1 record LOW

Records

1 record in Restricted Site Access · all components

TI-2022-01483 CVE-2022-1613 · GHSA-5vpr-gfj6-pwh2

Restricted Site Access < 7.3.2 - Access Bypass via IP Spoofing

Priority MEDIUM 57

The Restricted Site Access WordPress plugin before 7.3.2 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTE_ADDR, which makes it possible to bypass IP-based limitations in certain situations.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00726 Published 2022-09-26 Fixed in 7.3.2 CWE-639
Open these records in search →