The IP Blacklist Cloud plugin for WordPress, prior to version 3.41, had a vulnerability that allowed attackers to gain access to sensitive information stored in the database. This occurred because the plugin did not properly escape user input or prepare existing SQL queries, both of which left the plugin open to SQL Injection attacks.
This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!
Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:
> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21
Is this information incorrect? Please leave us a message.
