Vulnerabilities

TI-2026-70252 CVE-2026-104732 · GHSA-pw6h-rjh8-7grw

Advanced IP Blocker Authentication Bypass via 2FA Login Handler

MEDIUM 49

The Advanced IP Blocker plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 8.13.13 The vulnerability exists because `handle_login_action()` performs no server-side check — v…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00473 Published 2026-10-10 No fix listed CWE-287

TI-2026-30962 CVE-2026-42739 · GHSA-p4rc-j472-qjfr

WordPress Advanced IP Blocker plugin <= 8.10.7 - Cross Site Scripting (XSS) vulnerability

LOW 30

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in IniLerm Advanced IP Blocker advanced-ip-blocker allows DOM-Based XSS.This issue affects Advanced IP Blocker: from n/a…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00152 Published 2026-05-27 No fix listed CWE-79

Vulnerabilities

Filters

Advanced IP Blocker Authentication Bypass via 2FA Login Handler

WordPress Advanced IP Blocker plugin <= 8.10.7 - Cross Site Scripting (XSS) vulnerability