Advanced IP Blocker vulnerabilities

2 known vulnerabilities in Advanced IP Blocker from IniLerm. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Advanced IP Blocker: Improper Authentication

  CVE-2026-104732Oct 10, 2026IniLerm

  The Advanced IP Blocker plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 8.13.13 The vulnerability exists because `handle_login_action()` performs no server-side check — via transient, session marker, or equival

• 7.1 High severity

  Advanced IP Blocker: Improper Neutralization of Input During Web Page Generation

  CVE-2026-42739May 27, 2026IniLerm

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in IniLerm Advanced IP Blocker advanced-ip-blocker allows DOM-Based XSS.This issue affects Advanced IP Blocker: from n/a through <= 8.10.7.