CVE-2014-6230

MEDIUM 4.3CVE-2014-6230 · Published 25/10/2014 · updated 17/06/2026

In short

CVE-2014-6230 is a MEDIUM (CVSS 4.3) vulnerability affecting wp-ban (wp-ban project).
Chance of exploitation in the next 30 days (EPSS): 2.4%, higher than 84.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
wp-ban wp-ban_project	`≤ 1.6.3`	No fix yet

Description

WP-Ban plugin before 1.6.4 for WordPress, when running in certain configurations, allows remote attackers to bypass the IP blacklist via a crafted X-Forwarded-For header.

References

seclists.org/fulldisclosure/2014/Sep/60 · Exploit
security.dxw.com/advisories/vulnerability-in-wp-ban-allows-visitors-to-bypass-the-ip-blacklist-in-some-configurations · Exploit
wordpress.org/plugins/wp-ban/changelog · Vendor Advisory

More vulnerabilities in wp-ban

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free