Vulnerabilities

TI-2015-08033 CVE-2015-10105 · GHSA-pj62-8px7-m9hh

IP Blacklist Cloud Plugin CSV File Import ip_blacklist_cloud.php valid_js_identifier path traversal

HIGH 75

A vulnerability, which was classified as critical, was found in IP Blacklist Cloud Plugin up to 3.42 on WordPress.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00966 Published 2023-05-01 No fix listed CWE-22

TI-2022-21254 CVE-2022-43462 · GHSA-64cg-x9wj-m2fx

MEDIUM 43

Auth. SQL Injection (SQLi) vulnerability in Adeel Ahmed's IP Blacklist Cloud plugin <= 5.00 versions.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00742 Published 2023-01-17 No fix listed CWE-89

TI-2022-20661 CVE-2022-42462 · GHSA-p89m-g5v5-4f9m

LOW 22

Auth. Stored Cross-Site Scripting (XSS) vulnerability in Adeel Ahmed's IP Blacklist Cloud plugin <= 5.00 versions.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00403 Published 2023-01-17 No fix listed CWE-79