WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ip-address-blocker
Published
2019-06-15
Title
IP Address Blocker < 10.5 - CSRF leading to Arbitrary File Upload
Slug
ip-address-blocker
Published
2023-03-28
Title
IP Blocker Lite <= 11.1.1 - Cross-Site Request Forgery
Slug
ip-address-blocker
Published
2024-03-28
Title
IP Blocker Lite <= 11.1.1 - IP Spoofing
Slug
ip-based-login
Published
2025-03-04
Title
IP Based Login < 2.4.1 - Log Deletion via CSRF
Slug
ip-based-login
Published
2024-11-14
Title
IP Based Login < 2.4.1 - Admin+ Stored XSS
Slug
ip-based-login
Published
2025-06-19
Title
IP Based Login < 2.4.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
ip-based-login
Published
2025-09-22
Title
IP Based Login < 2.4.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
ip-blacklist-cloud
Published
2015-02-26
Title
IP Blacklist Cloud <= 3.4 - SQL Injection
Slug
ip-blacklist-cloud
Published
2015-03-13
Title
IP Blacklist Cloud < 3.43 - Admin+ Arbitrary File Disclosure
Slug
ip-blacklist-cloud
Published
2022-10-24
Title
IP Blacklist Cloud Plugin <= 5.00 - Admin+ SQLi
Slug
ip-blacklist-cloud
Published
2022-10-24
Title
IP Blacklist Cloud Plugin <= 5.00 - Admin+ Stored XSS
Slug
ip-loc8
Published
2024-10-09
Title
IP Loc8 <= 1.1 - Unauthenticated PHP Object Injection
Slug
ip-locator
Published
2025-03-27
Title
IP Locator < 4.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ip-logger
Published
2014-08-01
Title
IP-Logger <= 3.0 - SQL Injection
Slug
ip-metaboxes
Published
2023-05-25
Title
IP Metaboxes <= 2.1.1 - Admin+ Stored XSS
Slug
ip-metaboxes
Published
2023-05-25
Title
IP Metaboxes <= 2.1.1 - Unauthenticated Reflected XSS
Slug
ip-vault-wp-firewall
Published
2023-02-02
Title
IP Vault - WP Firewall < 2.1 - Admin+ Stored XSS
Slug
ip-vault-wp-firewall
Published
2024-08-30
Title
IP Vault – WP Firewall < 2.1 - IP Address Spoofing to Protection Mechanism Bypass
Slug
ip2location-country-blocker
Published
2022-01-06
Title
IP2Location Country Blocker < 2.26.5 - Ban Bypass
Slug
ip2location-country-blocker
Published
2022-02-04
Title
IP2Location Country Blocker < 2.26.9 - Admin+ Stored Cross-Site Scripting
Slug
ip2location-country-blocker
Published
2022-01-06
Title
IP2Location Country Blocker < 2.26.6 - Arbitrary Country Ban via CSRF
Slug
ip2location-country-blocker
Published
2022-01-06
Title
IP2Location Country Blocker < 2.26.5 - Subscriber+ Arbitrary Country Ban
Slug
ip2location-country-blocker
Published
2024-01-17
Title
IP2Location Country Blocker < 2.33.4 - Unauthenticated Sensitive Information Exposure via Debug Log File
Slug
ip2location-country-blocker
Published
2024-04-12
Title
Download IP2Location Country Blocker < 2.34.3 - Cross-Site Request Forgery
Slug
ip2location-country-blocker
Published
2025-01-24
Title
Download IP2Location Country Blocker < 2.38.4 - Authenticated (Administrator+) Stored Cross-Site Scripting