Lucene search
Krzysztof ZającPATCHSTACK:6F849E75C7AA2813A1B4B3713A35756FHistoryJan 06, 2022 - 12:00 a.m.
WordPress IP2Location Country Blocker plugin <= 2.26.4 - Arbitrary Country Ban vulnerability
2022-01-0600:00:00
Krzysztof Zając
patchstack.com
5
0.001 Low
EPSS
Percentile
29.6%
Arbitrary Country Ban by low privilege users vulnerability discovered by Krzysztof Zając in WordPress IP2Location Country Blocker plugin (versions <= 2.26.4).
Solution
Update the WordPress IP2Location Country Blocker plugin to the latest available version (at least 2.26.5).
| CPE | Name | Operator | Version |
|---|---|---|---|
| download ip2location country blocker | le | 2.26.4 |
Related
cve
cve
CVE-2021-25095
2022-02-07 16:15:44
wpexploit
wpexploit
IP2Location Country Blocker < 2.26.5 - Subscriber+ Arbitrary Country Ban
2022-01-06 00:00:00
wpvulndb
wpvulndb
IP2Location Country Blocker < 2.26.5 - Subscriber+ Arbitrary Country Ban
2022-01-06 00:00:00
prion
prion
Cross site request forgery (csrf)
2022-02-07 16:15:00
cvelist
cvelist
nvd
nvd
CVE-2021-25095
2022-02-07 16:15:44