Proxy Vpn Blocker Vulnerabilities

The Proxy & VPN Blocker plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 3.5.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user ac...

CVSS:

7.2

Affected:

up to 3.5.8

Fixed in:

3.5.9

Disclosed:

Jul 8, 2026

CVE-2026-57399 on NVD →

The Proxy & VPN Blocker plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 3.5.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform an unauthorized action.

CVSS:

4.3

Affected:

up to 3.5.3

Fixed in:

3.5.4

Disclosed:

Jan 9, 2026

CVE-2025-69353 on NVD →

[en] Missing Authorization vulnerability in Proxy &amp; VPN Blocker Proxy &amp; VPN Blocker proxy-vpn-blocker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Proxy &amp; VPN Blocker: from n/a through <= 3.5.3.

Affected:

up to 3.5.3

Fix:

No patched version reported

Disclosed:

Jan 6, 2026

CVE-2025-69353 on NVD →