Vulnerabilities > CVE-2022-1613 - Authorization Bypass Through User-Controlled Key vulnerability in 10Up Restricted Site Access
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
LOW Availability impact
NONE Summary
The Restricted Site Access WordPress plugin before 7.3.2 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTE_ADDR, which makes it possible to bypass IP-based limitations in certain situations.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |