CyberSecBulletin

IniLerm vulnerabilities

We track 2 vulnerabilities in IniLerm products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 10, 2026.

2vulnerabilities
1critical
1high
0exploited
8.4average CVSS score

Latest IniLerm vulnerabilities

  • 9.8 Critical severity

    Advanced IP Blocker: Improper Authentication

    CVE-2026-104732IniLerm

    The Advanced IP Blocker plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 8.13.13 The vulnerability exists because `handle_login_action()` performs no server-side check — via transient, session marker, or equival

  • 7.1 High severity

    Advanced IP Blocker: Improper Neutralization of Input During Web Page Generation

    CVE-2026-42739IniLerm

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in IniLerm Advanced IP Blocker advanced-ip-blocker allows DOM-Based XSS.This issue affects Advanced IP Blocker: from n/a through <= 8.10.7.