Cross-Site Request Forgery Vulnerability in HTACCESS IP Blocker by Taraprasad Swain
CVE-2025-60170

7.1HIGH

Key Information:

Vendor

WordPress
Status
Htaccess Ip Blocker
Vendor
CVE Published:
26 September 2025

What is CVE-2025-60170?

A Cross-Site Request Forgery (CSRF) vulnerability exists in the HTACCESS IP Blocker plugin by Taraprasad Swain, which allows unauthorized actions without user consent. This can lead to stored cross-site scripting (XSS) risks, compromising the security of the affected web applications. The vulnerability impacts versions from not applicable to 1.0, highlighting the need for timely updates and security measures to safeguard against potential exploitation.

Affected Version(s)

HTACCESS IP Blocker <= 1.0

References

https://patchstack.com/database/wordpress/plugin/htaccess...
vdb-entry

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Nguyen Xuan Chien (Patchstack Alliance)
JSON
.
CVE-2025-60170 : Cross-Site Request Forgery Vulnerability in HTACCESS IP Blocker by Taraprasad Swain