Approved changes feed: RSS · Atom

cpe:2.3:a:alexanderschneider:user_access_manager:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorAlexanderschneider (977f48ff-e7ab-57d0-bbeb-32f58787e869)
ProductUser Access Manager (2654b891-7f49-515c-ac6d-4e912d1442d7)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/wp-plugins/user-access-manager purl2cpe 2026-06-01 10:11:57.787579

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-1601 vulnerable 2026-06-08 05:39:13.536812 User Access Manager < 2.2.18 - IP Spoofing
The User Access Manager WordPress plugin before 2.2.18 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTE_ADDR, which makes it possible for attackers to access restricted content in certain situations.
Published: 2023-08-30T14:22:04.318Z
Updated: 2024-10-01T18:43:13.026Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.