Input validation vulnerability in Web Application Firewall – website security 2.1.2

The security plugin used for WordPress websites, called Web Application Firewall, has a vulnerability that allows hackers to spoof their IP Address. This means they can fake their location and access certain parts of the website that may have been blocked. The plugin versions 2.1.2 and below are affected by this issue because they do not have enough safeguards in place to prevent this type of attack. Hackers can manipulate the X-Forwarded-For header to use a different IP Address, which will be recorded in the website’s logs and can be used to bypass any restrictions set by the website owner.