plugin
14 known security issues reported for the Ip Blacklist Cloud WordPress plugin. Most recent disclosed May 1, 2023.
Running Ip Blacklist Cloud on your site? Check whether your installed version is affected.
Scan your site free[en] A vulnerability, which was classified as critical, was found in IP Blacklist Cloud Plugin up to 3.42 on WordPress. This affects the function valid_js_identifier of the file ip_blacklist_cloud.php of the component CSV File Import. The manipulation of the argument filename leads to path traversal. It is possible to...
[en] Auth. Stored Cross-Site Scripting (XSS) vulnerability in Adeel Ahmed's IP Blacklist Cloud plugin <= 5.00 versions.
[en] Auth. SQL Injection (SQLi) vulnerability in Adeel Ahmed's IP Blacklist Cloud plugin <= 5.00 versions.
The IP Blacklist Cloud plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 5.00 due to insufficient escaping on a user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with administrator-level privilege...
The IP Blacklist Cloud plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 5.00 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts...
The IP Blacklist Cloud plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'search' parameter in versions up to, and including, 5.00 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that ex...
The IP Blacklist Cloud plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'search' parameter in versions up to, and including, 5.00 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that ex...
The IP Blacklist Cloud plugin for WordPress is vulnerable to Directory Traversal in versions before 3.43 via the importCSVIPCloud function. This allows authenticated attackers with high-level privileges to read the contents of arbitrary files on the server, which can contain sensitive information.
The IP Blacklist Cloud plugin for WordPress is vulnerable to Directory Traversal in versions before 3.43 via the importCSVIPCloud function. This allows authenticated attackers with high-level privileges to read the contents of arbitrary files on the server, which can contain sensitive information.
The IP Blacklist Cloud plugin for WordPress is vulnerable to Path Traversal in versions up to, and including, 3.42 via the 'filename' parameter. This allows authenticated attackers, with administrative privileges, to read arbitrary files on the server that may contain sensitive information.
The IP Blacklist Cloud plugin for WordPress is vulnerable to SQL Injections via several parameters in versions before 3.41 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL queries. This makes it possible for attackers to append additional SQL queries int...
Because of this vulnerability, remote authenticated users can execute arbitrary SQL commands. Update the plugin.
The IP Blacklist Cloud plugin for WordPress is vulnerable to SQL Injections via several parameters in versions before 3.41 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL queries. This makes it possible for attackers to append additional SQL queries int...
The IP Blacklist Cloud WordPress plugin was affected by a SQL Injection security vulnerability.
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free