IP WHOIS leads to error 403 in combination with BBQ Firewall

Hi,

The IP Whois box just shows an endless loading animation on all of my sites. This is related to the BBQ Firewall plugin which blocks the following request with a 403 response:

GET https://(hostname)/wp-admin/admin-ajax.php?ip=(ipv4)&ajax_route=ip_extra_info&action=cerber_ajax&ajax_nonce=ff251709be&request=0&referrer_page_url=https://(hostname)/wp-admin/admin.php?page=cerber-security&tab=activity&filter_ip=(ipv4)

A similar case was discussed in the BBQ Firewall support area, where Jeff pointed out that an unexpected “:” (colon) causes the issue. My guess is that the referrer_page_url parameter should be properly escaped.

Issue still persists in WP Cerber version 9.6.10. The URL provided in query parameter referrer_page_url isn’t escaped properly.