User Access Manager

user_access_manager

Vendor: Alexanderschneider • 1 CVE

CVEs (1)

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2022-1601

1Alexanderschneider

1User Access Manager

Jun 17, 2026

Aug 30, 2023

N/A· v4

5.3 MEDIUM· v3

N/A· v2

The User Access Manager WordPress plugin before 2.2.18 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTE_ADDR, which makes it possible for attackers to access restricted content in certain si...Show more