PT-2014-8998 · WordPress · Simple-Ip-Ban

Published 2014-12-24 · Updated 2017-09-08 · CVE-2014-9413

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions simple-ip-ban plugin version 1.2.3

Description The issue allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks. This is achieved via the ip list, user agent list, or redirect url parameter in the simple-ip-ban page to "wp-admin/options-general.php" endpoint.

Recommendations For simple-ip-ban plugin version 1.2.3, consider disabling the plugin until a patch is available to prevent exploitation. As a temporary workaround, restrict access to the simple-ip-ban page in wp-admin/options-general.php to minimize the risk of exploitation. Avoid using the ip list, user agent list, or redirect url parameters in the affected page until the issue is resolved.

Exploit

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2014-9413

Affected Products

Simple-Ip-Ban

References · 5

• 🔥 http://packetstormsecurity.com/files/129500/WordPress-IP-Ban-1.2.3-CSRF-XSS.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-9413 · Security Note
• https://wordpress.org/plugins/simple-ip-ban/changelog · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9413 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/99503 · Note