CVE-2023-5239

CVE-2023-5239 describes a vulnerability in the CleanTalk Security & Malware Scan WordPress plugin prior to version 2.121, where it insecurely retrieves client IP addresses from potentially untrusted headers. This flaw allows an attacker to manipulate IP addresses, potentially bypassing brute-force protection mechanisms. With a CVSS score of 7.5 (HIGH), this vulnerability has a network attack vector and low attack complexity, leading to a high impact on integrity, though without confidentiality or availability impact. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.