Automatic Ban IP

Automatic Ban IP has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Automatic Ban IP has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.

All of these findings were reported by João Pedro Soares de Alcântara. Automatic Ban IP is installed on roughly 20 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 4.5.33.

Strategic Overview

Avg CVSSMedium
6.1/ 10
Patch Coverage0%
Open

1

Fixed

0

Get automatic notifications for all Automatic Ban IP vulnerabilities before they are exploited.

Most severe open issueCVSS 6.1CVE-2025-32632

Automatic Ban IP <= 1.0.7 - Reflected Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records
Automatic Ban IP banner
Latestv1.0.7

Automatic Ban IP

KaizenCoders

Author

KaizenCoders

5.0(2)
100/100
Last Updated
2016-04-17 (11y ago)
Active Installs
20+
Downloads
5,834
Requires WP
3.0+
Requires PHP
0+
Tested up to
WP 4.5.33
Created
2014-11-30 (12y ago)

Block IP addresses which are suspicious and try to post on your blog spam comments. This plugin need that you create an account on the Honey Pot Project (https://www.projecthoneypot.org, free api) or that you install the Spam Captcha plugin. In addition, if you want to geolocate the spammers your may create an account on (http://ipinfodb.com/, free api). Thus, you may display a world map with the concentration of spammers. Spammers may be blocked either by PHP based restrictions (i.e. WordPress generates a 403 page for such identified users) or by Apache based restriction (using Deny from in .htaccess file). The Apache restriction is far more efficient when hundreds of hosts sent you spams in few minutes. Multisite – WordPress MU Localization Afrikaans (South Africa) translation provided by SedLex, JanvanNiekerk English (United States), default language Japanese (Japan) translation provided by OsamuKudo Features of the framework This plugin uses the SL framework. This framework eases the creation of new plugins by providing tools and frames (see dev-toolbox plugin for more info). You may easily translate the text of the plugin and submit it to the developer, send a feedback, or choose the location of the plugin in the admin panel. Have fun !

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C