Security Advisory
CVE-2014-6230
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
WP-Ban plugin before 1.6.4 for WordPress, when running in certain configurations, allows remote attackers to bypass the IP blacklist via a crafted X-Forwarded-For header.