CVE-2022-4533

CVE-2022-4533 affects the Limit Login Attempts Plus plugin for WordPress, versions up to and including 1.1.0. This vulnerability allows for IP address spoofing due to insufficient validation of the X-Forwarded-For header, enabling attackers to bypass login restrictions. Rated with a CVSS score of 5.3 (Medium), the vulnerability has a network attack vector and low attack complexity, potentially leading to unauthorized access or circumvention of security policies. The impact is primarily on integrity, as login attempts can be misattributed. There is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit or Nuclei. Community discussion and media coverage for this CVE are minimal, indicating a low level of public attention.