Threat database

2 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.8	EPSS 0.5%	CVE-2026-104732Advanced IP Blocker · Improper Authentication Critical9.8EPSS 0.5%2026-10-10CVE Database V5CVE-2026-104732 The Advanced IP Blocker WordPress plugin up to version 8.13.13 contains a critical authentication bypass vulnerability. This flaw allows unauthenticated attackers to bypass two-factor authentication (2FA) by exploiting improper server-side checks and nonce reuse. Attackers can brute-force a 6-digit TOTP code without rate limiting or lockout, gaining full authenticated sessions and potentially complete site takeover. Exploitation requires only knowledge of a valid user ID with 2FA enabled. The vulnerability is tracked as CVE-2026-104732 with a CVSS score of 9.8. EPSS 0.5%Vulnerability inilerm #cwe-287 #ghsa-pw6h-rjh8-7grw	CVE Database V5	2026-10-10
High	7.1	EPSS 0.3%	CVE-2026-42739Advanced IP Blocker · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in IniLerm… High7.1EPSS 0.3%2026-05-27CVE Database V5CVE-2026-42739 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in IniLerm Advanced IP Blocker advanced-ip-blocker allows DOM-Based XSS.This issue affects Advanced IP Blocker: from n/a through <= 8.10.7. EPSS 0.3%Vulnerability IniLerm	CVE Database V5	2026-05-27

Showing 1–2 of 2 results