CVE-2022-4550: User Activity Project User Activity

High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days.

The User Activity WordPress plugin through 1.0.1 checks headers such as the X-Forwarded-For to retrieve the IP address of the request, which could lead to IP spoofing

Affected products

• User Activity Project User Activity: up to and including 1.0.1

Published 2023-02-27. Last modified 2026-06-17.