| Package | Affected versions | Patched versions |
|---|---|---|
| coreactivity | < 2.1 | 2.1 |
The coreActivity: Activity Logging plugin for WordPress plugin before 2.1 retrieved IP addresses of requests via headers such X-FORWARDED to log them, allowing users to spoof them by providing an arbitrary value
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free