Exploit for User Access Manager < 2.2.18 - IP Spoofing CVE-2022-1601

Name: Exploit for User Access Manager < 2.2.18 - IP Spoofing CVE-2022-1601
Rating: 5 (49 reviews)

2023-08-04 | CVSS 5.0

## https://sploitus.com/exploit?id=WPEX-ID:F6D3408C-2CEB-4A89-822B-13F5272A5FCE
Set HTTP_X_REAL_IP which is used in checkUserGroupAccess() to use an IP from the allowlist.