Exploit for User Activity Tracking and Log < 4.1.4 - IP Spoofing CVE-2024-0970

Name: Exploit for User Activity Tracking and Log < 4.1.4 - IP Spoofing CVE-2024-0970
Rating: 5 (59 reviews)

2024-01-29 | CVSS 9.5

## https://sploitus.com/exploit?id=WPEX-ID:7DF6877C-6640-41BE-AACB-20C7DA61E4DB
1. Add X-Forwarded-For: 11.11.11.11 to any request which will be in activity log. For example in creation of new post.
2. View the activity log and see that the incorrect IP (`11.11.11.11`) is logged