Wp-ban Project

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Wp-ban Project records in CISA KEV

No Wp-ban Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Wp-ban 4 records MEDIUM

Records

4 records

TI-2022-03901 CVE-2022-4260 · GHSA-7wx2-wjvp-v5h2

WP-Ban < 1.69.1 - Admin+ Stored XSS

MEDIUM 55

The WP-Ban WordPress plugin before 1.69.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_ht…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00894 Published 2023-01-02 Fixed in 1.69.1

TI-2022-04232 CVE-2022-4631 · GHSA-264w-h7gv-xm4m

WP-Ban ban-options.php cross site scripting

LOW 28

A vulnerability, which was classified as problematic, was found in WP-Ban.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00418 Published 2022-12-21 No fix listed CWE-707

TI-2021-03110 CVE-2021-4252 · GHSA-q9f9-65vf-f4jf

WP-Ban ban-options.php toggle_checkbox cross site scripting

LOW 28

A vulnerability, which was classified as problematic, has been found in WP-Ban.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00497 Published 2022-12-18 No fix listed CWE-707

TI-2014-05128 CVE-2014-6230 · GHSA-6v32-2g5q-g9q4

WP-Ban plugin before 1.6.4 for WordPress, when running in certain configurations, allows…

LOW 25

WP-Ban plugin before 1.6.4 for WordPress, when running in certain configurations, allows remote attackers to bypass the IP blacklist via a crafted X-Forwarded-For header.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0244 Published 2014-10-25 No fix listed CWE-20

Open these records in search →

Critical	0
High	0
Medium	4
Low	0
No CVSS	0