This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2023-4631 | BDVDB-2026-212422 Detail

DoLogin Security

Description#

The DoLogin Security WordPress plugin before 3.7 uses headers such as the X-Forwarded-For to retrieve the IP address of the request, which could lead to IP spoofing.

Impact#

Per CVSS v3.1: confidentiality impact none, integrity impact low, availability impact none. Attack vector: network.

Weaknesses#

  • CWE-290 Authentication Bypass by Spoofing

References#

Exploit#

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.