medium5.3
CVE-2024-0970
This User Activity Tracking and Log WordPress plugin before 4.1.4 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to man…
Impact
This User Activity Tracking and Log WordPress plugin before 4.1.4 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its value.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mooveagency | User Activity Tracking And Log | before 4.1.4 |