CVE-2014-6230 WP-Ban < 1.64 - Improper Input Validation
MediumCVSS 4.3
EPSS 2.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
WP-Ban plugin before 1.6.4 for WordPress, when running in certain configurations, allows remote attackers to bypass the IP blacklist via a crafted X-Forwarded-For header.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wp-ban project wp-ban | <= 1.6.3 | No fix listed |
| wordpress wp-ban(WordPress) | < 1.64 | 1.64 |
References
- 20140917 Vulnerability in WP-Ban allows visitors to bypass the IP blacklist in some configurations (WordPress plugin) exploit mailing-list
- security.dxw.com exploit
- wordpress.org vendor-advisory
- Wordfence Intelligence third-party-advisory
- www.cve.org