WordPress Plugin Vulnerabilities

Wordfence 5.2.3 - Banned IP Functionality Bypass

Description

The Wordfence Security – Firewall & Malware Scan WordPress plugin was affected by a Banned IP Functionality Bypass security vulnerability.

Affects Plugins

Plugin icon
wordfence
Fixed in 5.2.4

References

URL
https://packetstormsecurity.com/files/#128259/
URL
https://seclists.org/fulldisclosure/2014/Sep/49
URL
https://vexatioustendencies.com/wordfence-v5-2-3-2-stored-xss-insufficient-logging-throttle-bypass-exploit-detection-bypass/

Miscellaneous

Submitter
pvdl
Verified
No
WPVDB ID
1e2e1d07-426f-4f00-b0f6-b1480e4a5893

Timeline

Publicly Published
2014-09-22 (about 11 years ago)
Added
2014-09-22 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2018-05-10
Title
BBE Theme < 1.53 - Direct Object Reference
Published
2020-04-29
Title
WordPress < 5.4.1 - Unauthenticated Users View Private Posts
Published
2024-04-12
Title
Download Manager < 3.2.83 - Unauthenticated Password Protected File Bypass
Published
2019-08-27
Title
WP Private Content Plus < 2.0 - Unauthenticated Options Change
Published
2016-02-08
Title
User Meta Manager <= 3.4.7 - Information Disclosure