Exploit for Royal Elementor Addons < 1.3.95 - Unauthenticated IP Spoofing CVE-2024-32786

Name: Exploit for Royal Elementor Addons < 1.3.95 - Unauthenticated IP Spoofing CVE-2024-32786
Rating: 5 (137 reviews)

2024-05-03 | CVSS 5.3

## https://sploitus.com/exploit?id=WPEX-ID:61AAB095-66B8-4CE7-83A3-0B8770DDA453
Set any of the following server headers as used in get_client_ip() to spoof the IP address and bypass the block.
            'HTTP_CLIENT_IP',
   'HTTP_X_FORWARDED_FOR',
   'HTTP_X_FORWARDED',
   'HTTP_X_CLUSTER_CLIENT_IP',
   'HTTP_FORWARDED_FOR',
   'HTTP_FORWARDED',