CVE-2021-4252

A vulnerability, which was classified as problematic, has been found in WP-Ban. This issue affects the function toggle_checkbox of the file ban-options.php. The manipulation of the argument $_SERVER["HTTP_USER_AGENT"] leads to cross site scripting. The attack may be initiated remotely. The name of the patch is 13e0b1e922f3aaa3f8fcb1dd6d50200dd693fd76. It is recommended to apply a patch to fix this issue. The identifier VDB-216209 was assigned to this vulnerability.

• CWE-707

• https://github.com/lesterchan/wp-ban/commit/13e0b1e922f3aaa3f8fcb1dd6d50200dd693fd76Patch, Third Party Advisory
• https://github.com/lesterchan/wp-ban/pull/11Patch, Third Party Advisory
• https://vuldb.com/?id.216209Third Party Advisory
• https://github.com/lesterchan/wp-ban/commit/13e0b1e922f3aaa3f8fcb1dd6d50200dd693fd76Patch, Third Party Advisory
• https://github.com/lesterchan/wp-ban/pull/11Patch, Third Party Advisory
• https://vuldb.com/?id.216209Third Party Advisory

Published

Dec 18, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-4246A vulnerability was found in roxlukas LMeve and classified a…9.8
• CVE-2021-4247A vulnerability has been found in OWASP NodeGoat and classif…7.5
• CVE-2021-4248A vulnerability was found in kapetan dns up to 6.1.0. It has…9.8
• CVE-2021-4249A vulnerability was found in xml-conduit. It has been classi…7.5
• CVE-2021-4250A vulnerability classified as problematic has been found in …7.5
• CVE-2021-4251A vulnerability classified as problematic was found in as. T…6.1
• CVE-2021-42521There is a NULL pointer dereference vulnerability in VTK bef…7.5
• CVE-2021-42522There is a Information Disclosure vulnerability in anjuta/pl…7.5
• CVE-2021-42523There are two Information Disclosure vulnerabilities in colo…7.5
• CVE-2021-42524Adobe Animate version 21.0.9 (and earlier) are affected by a…7.8
• CVE-2021-42525Acrobat Animate versions 21.0.9 (and earlier)is affected by …3.3
• CVE-2021-42526Adobe Premiere Elements 20210809.daily.2242976 (and earlier)…7.8