CVE-2024-30479: 
WordPress vulnerability analysis and mitigation

Authentication Bypass by Spoofing vulnerability was discovered in LionScripts IP Blocker Lite WordPress plugin affecting versions through 11.1.1. The vulnerability was reported on March 28, 2024, by security researcher Kévin Mosbahi (Mika) (Patchstack).

The vulnerability has been assigned a CVSS v3.1 base score of 5.3 (Medium) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N. It is classified as CWE-290 (Authentication Bypass by Spoofing) and allows functionality bypass in the plugin (Patchstack).

The vulnerability allows malicious actors to bypass certain restrictions in the code, though specific impact details vary case by case. The security issue has been assessed as having a low severity impact and is considered unlikely to be exploited (Patchstack).

The vulnerability can be exploited by unauthenticated users, requiring no special privileges or user interaction. The attack vector is network-accessible (AV:N) with low attack complexity (AC:L) (Patchstack).

As of the vulnerability disclosure, no official fix is available for this security issue. Given the low severity impact, virtual patching (vPatch) has been deemed unnecessary (Patchstack).