Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2023-4631 — Repository for CVE-2023-4631 vulnerability. | Kitploit
Tools/GitHubGitHub/b0marek/cve-2023-4631
Vulnerability AnalysisIDS/IPS EvasionImpersonation ToolsInformation GatheringWeb Security
GitHubb0marek/cve-2023-4631

CVE-2023-4631

Repository for CVE-2023-4631 vulnerability.

View Repository
2 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE ID: CVE-2023-4631

Vulnerability Type: IP Address Spoofing

Description: The DoLogin Security plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 3.6. This is due to insufficient restrictions on where the IP Address information is being retrieved for request logging and login restrictions. Attackers can supply the X-Forwarded-For header with with a different IP Address that will be logged and can be used to bypass settings that may have blocked out an IP address from logging in.

Steps to reproduce:

  1. Send login request with x-forwarded-for header, for ex. X-Forwarded-For: 8.8.8.8.
  2. See spoofed IP address in the "Login Attempts Log".

Reference:

  1. https://wpscan.com/vulnerability/28613fc7-1400-4553-bcc3-24df1cee418e
  2. https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4631
  3. https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/dologin/dologin-security-36-ip-address-spoofing
Download Tool