WordPress plugin
IP Blacklist Cloud security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical1
- High1
- Medium4
- Low0
All IP Blacklist Cloud vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High7.2 | Authenticated (Administrator+) SQL Injection ≤5.00No patch available | CVE-2022-43462 | |
| Medium5.5 | Authenticated (Administrator+) Stored Cross-Site Scripting ≤5.00No patch available | CVE-2022-42462 | |
| Medium6.1 | Reflected Cross-Site Scripting ≤5.00No patch available | — | |
| Medium4.9 | Directory Traversal <3.43Update to 3.43 | — | |
| Medium4.9 | Authenticated (Admin+) Path Traversal ≤3.42Update to 3.43 | CVE-2015-10105 | |
| Critical9.8 | SQL Injections <3.41Update to 3.41 | — |
- High7.2Authenticated (Administrator+) SQL Injection
≤5.00No patch available
- Medium5.5Authenticated (Administrator+) Stored Cross-Site Scripting
≤5.00No patch available
- Medium6.1Reflected Cross-Site Scripting
≤5.00No patch available
- Medium4.9Directory Traversal
<3.43Update to 3.43
- Medium4.9Authenticated (Admin+) Path Traversal
≤3.42Update to 3.43
- Critical9.8SQL Injections
<3.41Update to 3.41
IP Blacklist Cloud: common questions
Does IP Blacklist Cloud have known vulnerabilities?
Yes. VulnCrest Radar lists 6 known vulnerabilities in IP Blacklist Cloud: 1 critical, 1 high, 4 medium. At least one is not fixed in the latest version.
How do I check which version of IP Blacklist Cloud I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent IP Blacklist Cloud vulnerability?
CVE-2022-43462, published Oct 24, 2022: IP Blacklist Cloud <= 5.00 - Authenticated (Administrator+) SQL Injection. Severity: High (CVSS 7.2).
Is any IP Blacklist Cloud vulnerability listed in CISA KEV?
No. None of the known IP Blacklist Cloud vulnerabilities is currently listed in the CISA KEV catalog.