The FluentAuth WordPress plugin before 1.0.2 prioritizes getting a visitor's IP address from certain HTTP headers over PHP's REMOTE_ADDR, which makes it possible to bypass the IP-based blocks set by the plugin.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Fluent Security Plugin | — | Update fluent-security plugin to version 1.0.2, or a newer patched version | May 15, 2025 | Dec 27, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub