Mohammadreza Rashidi

**Name of the Vulnerable Software and Affected Versions** Limit Login Attempts (Spam Protection) plugin for WordPress versions up to, and including, 5.3 **Description** The issue arises from insufficient restrictions on where the IP Address information is being retrieved for request logging and login restrictions. Attackers can supply the `X-Forwarded-For` header with a different IP Address that will be logged and can be used to bypass settings that may have blocked out an IP address or country from logging in. **Recommendations** For Limit Login Attempts (Spam Protection) plugin for WordPress versions up to, and including, 5.3, update to a version later than 5.3 to resolve the issue. As a temporary workaround, consider restricting access to the `X-Forwarded-For` header to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** WordPress Visitors plugin for WordPress version 1.0 **Description** The WordPress Visitors plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a spoofed HTTP Header value due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses the nm vistior page. **Recommendations** For version 1.0, update to a version that addresses the insufficient input sanitization and output escaping issue to prevent Stored Cross-Site Scripting attacks. As a temporary workaround, consider restricting access to the nm vistior page to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Limit Login Attempts Plus plugin for WordPress versions up to, and including, 1.1.0 **Description** The issue arises from insufficient restrictions on where the IP Address information is being retrieved for request logging and login restrictions. This allows attackers to supply the `X-Forwarded-For` header with a different IP Address that will be logged, potentially bypassing settings that block specific IP addresses or countries from logging in. **Recommendations** For versions up to, and including, 1.1.0, consider disabling the IP Address logging feature until a patch is available, or restrict access to the login functionality to minimize the risk of exploitation. Avoid relying solely on the `X-Forwarded-For` header for IP Address information.

**Name of the Vulnerable Software and Affected Versions** Security, Antivirus, Firewall – S.A.F plugin for WordPress versions up to, and including, 2.3.5 **Description** The issue is due to insufficient restrictions on where the IP Address information is being retrieved for request logging and login restrictions. Attackers can supply the `X-Forwarded-For` header with a different IP Address that will be logged and can be used to bypass settings that may have blocked out an IP address from logging in. **Recommendations** For Security, Antivirus, Firewall – S.A.F plugin for WordPress versions up to, and including, 2.3.5, consider updating to a version that addresses the IP Address Spoofing issue. As a temporary workaround, consider restricting the use of the `X-Forwarded-For` header to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** The IP Vault – WP Firewall plugin for WordPress versions up to, and including, 1.1 **Description** The issue is due to insufficient restrictions on where the IP Address information is being retrieved for request logging and login restrictions. Attackers can supply the `X-Forwarded-For` header with a different IP Address that will be logged and can be used to bypass settings that may have blocked out an IP address or country from logging in. **Recommendations** For versions up to, and including, 1.1, consider restricting access to the `X-Forwarded-For` header to minimize the risk of exploitation. As a temporary workaround, review and update the request logging and login restrictions settings to account for potential IP address spoofing. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Web Application Firewall plugin for WordPress versions up to, and including, 2.1.2 **Description** The issue arises from insufficient restrictions on where the IP Address information is being retrieved for request logging and login restrictions. Attackers can exploit this by supplying the `X-Forwarded-For` header with a different IP Address, which will be logged and can be used to bypass settings that may have blocked out an IP address or country from logging in. **Recommendations** For versions up to, and including, 2.1.2, consider updating to a version that addresses this issue, as the current version allows attackers to manipulate the IP address logged by the system, potentially bypassing security restrictions. As a temporary workaround, consider restricting access to the `X-Forwarded-For` header to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** LOGIN AND REGISTRATION ATTEMPTS LIMIT plugin for WordPress versions up to, and including, 2.1 **Description** The issue is due to insufficient restrictions on where the IP Address information is being retrieved for request logging and login restrictions. Attackers can supply the `X-Forwarded-For` header with a different IP Address that will be logged and can be used to bypass settings that may have blocked out an IP address from logging in. **Recommendations** For versions up to, and including, 2.1, consider restricting access to the `X-Forwarded-For` header to minimize the risk of exploitation. As a temporary workaround, review and adjust the IP address logging and login restriction settings to account for potential spoofing.

**Name of the Vulnerable Software and Affected Versions** The Hide My WP Ghost – Security Plugin plugin for WordPress versions up to, and including, 5.0.18 **Description** The issue is due to insufficient restrictions on where the IP Address information is being retrieved for request logging and login restrictions. Attackers can supply the `X-Forwarded-For` header with a different IP Address that will be logged and can be used to bypass settings that may have blocked out an IP address from logging in. **Recommendations** For versions up to, and including, 5.0.18, consider restricting the use of the `X-Forwarded-For` header until a patch is available. As a temporary workaround, review and update request logging and login restriction settings to minimize the risk of exploitation.