WP-Ban Cross-Site Script Vulnerability

WP-Ban is a blog by Lester Chan, a personal developer that bans users from WordPress via IP, IP range, hostname, user agent and referring url. WP-Ban suffers from a security vulnerability that stems from an unknown function in its ban-options.php file that allows an attacker to implement cross-si...

WP-Ban security vulnerability

WP-Ban is a blog by Lester Chan, an individual developer, that bans users from accessing WordPress via IP, IP range, hostname, user agent, and referring url. A security vulnerability exists in WP-Ban, which stems from the manipulation of a parameter in the togglecheckbox function of its...