Automatic Ban IP
Automatic Ban IP has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Automatic Ban IP has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
All of these findings were reported by João Pedro Soares de Alcântara. Automatic Ban IP is installed on roughly 20 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 4.5.33.
CVE-2025-32632Automatic Ban IP <= 1.0.7 - Reflected Cross-Site Scripting
Read the full analysisVulnerability Records

Automatic Ban IP
Author
KaizenCoders
Block IP addresses which are suspicious and try to post on your blog spam comments. This plugin need that you create an account on the Honey Pot Project (https://www.projecthoneypot.org, free api) or that you install the Spam Captcha plugin. In addition, if you want to geolocate the spammers your may create an account on (http://ipinfodb.com/, free api). Thus, you may display a world map with the concentration of spammers. Spammers may be blocked either by PHP based restrictions (i.e. WordPress generates a 403 page for such identified users) or by Apache based restriction (using Deny from in .htaccess file). The Apache restriction is far more efficient when hundreds of hosts sent you spams in few minutes. Multisite – WordPress MU Localization Afrikaans (South Africa) translation provided by SedLex, JanvanNiekerk English (United States), default language Japanese (Japan) translation provided by OsamuKudo Features of the framework This plugin uses the SL framework. This framework eases the creation of new plugins by providing tools and frames (see dev-toolbox plugin for more info). You may easily translate the text of the plugin and submit it to the developer, send a feedback, or choose the location of the plugin in the admin panel. Have fun !
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C