What’s Vulnerable › Vulnerabilities

CVE-2023-4631: DoLogin Security < 3.7 - IP Spoofing

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-09-25 · updated 2026-06-17

Description

The DoLogin Security WordPress plugin before 3.7 uses headers such as the X-Forwarded-For to retrieve the IP address of the request, which could lead to IP spoofing.

Affected products

• DoLogin Security: before 3.7 — fixed in 3.7

How to fix

Upgrade to a fixed version: DoLogin Security 3.7. Check the vendor advisory for mitigations.

References

• https://wpscan.com/vulnerability/28613fc7-1400-4553-bcc3-24df1cee418e
• https://wpscan.com/vulnerability/28613fc7-1400-4553-bcc3-24df1cee418e

Get alerted when CVE-2023-4631 or the next vulnerability affects your stack