PatchTheCVE: wp-banhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2022-4260: The WP-Ban WordPress plugin before 1.69.1 does not sanitise and escape some of its settings, which could allowhttps://patchthecve.com/cve/CVE-2022-4260.htmlhttps://patchthecve.com/cve/CVE-2022-4260.htmlWed, 17 Jun 2026 05:20:25 +0000MEDIUM 4.8: The WP-Ban WordPress plugin before 1.69.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).CVE-2022-4631: A vulnerability, which was classified as problematic, was found in WP-Banhttps://patchthecve.com/cve/CVE-2022-4631.htmlhttps://patchthecve.com/cve/CVE-2022-4631.htmlWed, 17 Jun 2026 05:21:24 +0000LOW 3.5: A vulnerability, which was classified as problematic, was found in WP-Ban. Affected is an unknown function of the file ban-options.php. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The name of the patch is 22b925449c84faa9b7496abe4f8f5661cb5eb3bf. It CVE-2021-4252: A vulnerability, which was classified as problematic, has been found in WP-Banhttps://patchthecve.com/cve/CVE-2021-4252.htmlhttps://patchthecve.com/cve/CVE-2021-4252.htmlWed, 17 Jun 2026 04:19:21 +0000LOW 3.5: A vulnerability, which was classified as problematic, has been found in WP-Ban. This issue affects the function toggle_checkbox of the file ban-options.php. The manipulation of the argument $_SERVER["HTTP_USER_AGENT"] leads to cross site scripting. The attack may be initiated remotely. The name of t