| Package | Affected versions | Patched versions |
|---|---|---|
| fluentauth | < 1.0.2 | 1.0.2 |
The FluentAuth WordPress plugin before 1.0.2 prioritizes getting a visitor's IP address from certain HTTP headers over PHP's REMOTE_ADDR, which makes it possible to bypass the IP-based blocks set by the plugin.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free