CVE-2022-1613

CVE-2022-1613: Restricted Site Access < 7.3.2 - Access Bypass via IP Spoofing

Vendor Unknown

Product Restricted Site Access

Weakness CWE-639 · IDOR

Published September 26, 2022

Last update May 21, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Restricted Site Access WordPress plugin before 7.3.2 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTE_ADDR, which makes it possible to bypass IP-based limitations in certain situations.

Key dates

02Disclosure timeline

September 26, 2022 CVE published

May 21, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-1613 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/639.html

Related vulnerabilities

04Related CVE

CVE-2025-3811 WPBookit <= 1.0.2 - Insecure Direct Object Reference to Unauthenticated Privilege Escalation via Email Update CVE-2022-0266 Authorization Bypass Through User-Controlled Key in livehelperchat/livehelperchat CVE-2025-12833 GeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.139 - Missing Authorization to Authenticated (Author+) Arbitrary Image Attachment CVE-2025-26857 Growatt Cloud portal Authorization Bypass Through User-Controlled Key CVE-2024-13063 IDOR in Akinsoft's MyRezzta