SecuPress Free and SecuPress Pro <= 1.4.12 - Unauthenticated Arbitrary IP Ban
highThe SecuPress Free and SecuPress Pro plugins for WordPress is vulnerable to unauthenticated arbitrary IP bans in versions up to, and including, 1.4.12. This makes it possible for unauthenticated remote attackers to ban any IP address from accessing the site.
- CVSS:
- 7.5
- Affected:
- up to 2.0
- Fixed in:
- 2.0
- Disclosed:
- Mar 22, 2021