https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 12:50:37 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-288338 EUVD-2026-288338 https://cve.radiocsirt.org/vuln/euvd-2026-288338 https://cve.radiocsirt.org/vuln/fkie_cve-2022-4529 <p>The Security, Antivirus, Firewall – S.A.F plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 2.3.5. This is due to insufficient restrictions on where the IP Address information is being retrieved for request logging and login restrictions. Attackers can supply the X-Forwarded-For header with with a different IP Address that will be logged and can be used to bypass settings that may have blocked out an IP address from logging in.</p> <p>The Security, Antivirus, Firewall – S.A.F plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 2.3.5. This is due to insufficient restrictions on where the IP Address information is being retrieved for request logging and login restrictions. Attackers can supply the X-Forwarded-For header with with a different IP Address that will be logged and can be used to bypass settings that may have blocked out an IP address from logging in.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-4529 https://cve.radiocsirt.org/vuln/ghsa-g8hq-34hj-gpmm <p>The Security, Antivirus, Firewall – S.A.F plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 2.3.5. This is due to insufficient restrictions on where the IP Address information is being retrieved for request logging and login restrictions. Attackers can supply the X-Forwarded-For header with with a different IP Address that will be logged and can be used to bypass settings that may have blocked out an IP address from logging in.</p> <p>The Security, Antivirus, Firewall – S.A.F plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 2.3.5. This is due to insufficient restrictions on where the IP Address information is being retrieved for request logging and login restrictions. Attackers can supply the X-Forwarded-For header with with a different IP Address that will be logged and can be used to bypass settings that may have blocked out an IP address from logging in.</p> https://cve.radiocsirt.org/vuln/ghsa-g8hq-34hj-gpmm https://cve.radiocsirt.org/vuln/gsd-2022-4529 gsd-2022-4529 https://cve.radiocsirt.org/vuln/gsd-2022-4529