Skip to content

Vendor

wp-ban project vulnerabilities

4 published CVES affecting wp-ban project, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
4
Critical
0
High
0
Medium
4
Low
0
Unscored
0
CISA KEV
0
Atom feed of wp-ban project alerts

Products

Latest wp-ban project CVEs

Newest publication first

  1. CVE-2022-4260 WP-Ban < 1.69.1 - Admin+ Stored XSS

    Published
    MediumCVSS 4.8 EPSS 0.89%

    The WP-Ban WordPress plugin before 1.69.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)...

  2. CVE-2022-4631 WP-Ban ban-options.php cross site scripting

    Published
    MediumCVSS 6.1 EPSS 0.42%

    A vulnerability, which was classified as problematic, was found in WP-Ban. Affected is an unknown function of the file ban-options.php. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The name of the patch is 22b925449c84faa9b7496abe4...

  3. CVE-2021-4252 WP-Ban ban-options.php toggle_checkbox cross site scripting

    Published
    MediumCVSS 6.1 EPSS 0.50%

    A vulnerability, which was classified as problematic, has been found in WP-Ban. This issue affects the function toggle_checkbox of the file ban-options.php. The manipulation of the argument $_SERVER["HTTP_USER_AGENT"] leads to cross site scripting. The attack may be initiated rem...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.