CVE-2014-9413

The CVE-2014-9413 entry concerns the WordPress IP Ban plugin (simple-ip-ban) up to version 1.2.3, which has multiple CSRF vulnerabilities that let an attacker hijack an administrator’s session for requests that perform XSS via the ip_list, user_agent_list, or redirect_url parameters on the simple...