## https://sploitus.com/exploit?id=WPEX-ID:A1179959-2044-479F-A5CA-3C9FFC46D00E 1. Send login request with x-forwarded-for: [REDACTED_IP] 2. Show spoofed IP address in the dashboard (OWASP A09:2021 โ Security Logging and Monitoring Failures)