CVE-2014-6230
WP-Ban plugin before 1.6.4 for WordPress, when running in certain configurations, allows remote attackers to bypass the IP blacklist via a crafted X-Forwarded-For header.
- Score
- CVSS 2.0 4.3 Medium
- Status
- Modified - cve@mitre.org
- Published
- 2014-10-25
- Last modified
- 2024-08-06
- Weaknesses
- CWE-20
Affected products
References
- http://seclists.org/fulldisclosure/2014/Sep/60
- https://security.dxw.com/advisories/vulnerability-in-wp-ban-allows-visitors-to-bypass-the-ip-blacklist-in-some-configur…
- https://wordpress.org/plugins/wp-ban/changelog/
