VULNERABILITY INTELLIGENCE

CVE-2024-0868

CVSS score5.3 MEDIUM

EPSS probability0.48%

CISA KEVNot currently listed

Published2024-04-17

Last modified2026-06-17

Description

The coreActivity: Activity Logging plugin for WordPress plugin before 2.1 retrieved IP addresses of requests via headers such X-FORWARDED to log them, allowing users to spoof them by providing an arbitrary value