Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-82265
HistoryMar 31, 2022 - 12:00 a.m.

Wordpress Plugin IP2Location Country Blocker Cross-Site Request Forgery Vulnerability

2022-03-3100:00:00
China National Vulnerability Database
www.cnvd.org.cn
4

0.001 Low

EPSS

Percentile

37.9%

WordPress is the Wordpress Foundation’s set of blogging platform developed using the PHP language. WordPress plugin is a WordPress open source application plugin. cross-site request forgery vulnerability exists in the Wordpress Plugin IP2Location Country Blocker, which stems from the product’s ip2location_country_blocker_save_ rules link does not validate the user’s identity. An attacker could use this vulnerability to send an unintended request to the server.

0.001 Low

EPSS

Percentile

37.9%