Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2023-48753 2 10up, Wordpress 2 Restricted Site Access, Wordpress 2025-07-12 5.3 Medium
Authentication Bypass by Spoofing vulnerability in 10up Restricted Site Access allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Restricted Site Access: from n/a through 7.4.1.
CVE-2022-1613 1 10up 1 Restricted Site Access 2025-05-21 5.3 Medium
The Restricted Site Access WordPress plugin before 7.3.2 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTE_ADDR, which makes it possible to bypass IP-based limitations in certain situations.