CVE-2021-4226: Rsjoomla Rsfirewall!

Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days.

RSFirewall tries to identify the original IP address by looking at different HTTP headers. A bypass is possible due to the way it is implemented.

Affected products

• Rsjoomla Rsfirewall!: before 1.1.25 (fixed in 1.1.25)

Published 2022-12-15. Last modified 2026-06-17.