TI-2022-01483 Aliases CVE-2022-1613 GHSA-5vpr-gfj6-pwh2

Restricted Site Access < 7.3.2 - Access Bypass via IP Spoofing

MEDIUM 57CWE-639Published 2022-09-26 · Updated 2025-05-21

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: Security bypass
Confidentiality · integrity · availability: None · Low · None
Fix status: Fixed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-639.

Summary

The Restricted Site Access WordPress plugin before 7.3.2 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTE_ADDR, which makes it possible to bypass IP-based limitations in certain situations.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV

EPSS 0.00726 54th percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by NVD

Fix Fixed Restricted Site Access (Unknown): 7.3.2

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: Poc
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Unknown	Restricted Site Access	7.3.2 to before 7.3.2	7.3.2	Patch available	CNA

Restricted Site Access VendorUnknown Affected 7.3.2 to before 7.3.2 Fixed in 7.3.2 Patch available CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:10up:restricted_site_access::::::wordpress::*	before 7.3.2	Vulnerable	10up

cpe:2.3:a:10up:restricted_site_access:*:*:*:*:*:wordpress:*:* Versions before 7.3.2 Vulnerable ·10up

Remediation

Fix · CNA Restricted Site Access (Unknown) Fixed in 7.3.2

Timeline

2026-10-02 Threatist record created from CVE-2022-1613
2026-10-03 Alias added: GHSA-5vpr-gfj6-pwh2

References

Exploit 1

https://wpscan.com/vulnerability/c03863ef-9ac9-402b-8f8d-9559c9988e2b

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences