WordPress Plugin Vulnerabilities

IP Blacklist Cloud <= 3.4 - SQL Injection

Description

The IP Blacklist Cloud WordPress plugin was affected by a SQL Injection security vulnerability.

Affects Plugins

Plugin icon
ip-blacklist-cloud
Fixed in 3.4.1

References

URL
https://github.com/wp-plugins/ip-blacklist-cloud/commit/98c22e450ea5b1ff005cc38f54cce20a02bff0fa

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89

Miscellaneous

Submitter
pvdl
Verified
No
WPVDB ID
ed286d5d-c837-4526-a4cc-fab4da1700cc

Timeline

Publicly Published
2015-02-26 (about 11 years ago)
Added
2015-03-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2025-01-24
Title
Email Subscription Popup < 1.2.24 - Authenticated (Administrator+) SQL Injection
Published
2025-06-05
Title
WP Online Users Stats <= 1.0.0 - Authenticated (Editor+) SQL Injection via table_name Parameter
Published
2024-12-17
Title
WPLMS < 1.9.9.5.3 - Unauthenticated SQL Injection
Published
2014-08-01
Title
Evarisk <= 5.1.3.6 - SQL Injection
Published
2024-06-06
Title
Tutor LMS – eLearning and online course solution < 2.7.2 -Authenticated (Administrator+) SQL Injection