EUVD-2024-30261

Malicious code in bioql PyPI...

CVE-2025-24731

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in IP2Location Download IP2Location Country Blocker ip2location-country-blocker allows Stored XSS.This issue affects Download IP2Location Country Blocker: from n/a through = 2.38.3...

CVE-2024-32443

Cross-Site Request Forgery CSRF vulnerability in IP2Location Download IP2Location Country Blocker.This issue affects Download IP2Location Country Blocker: from n/a through 2.34.2...

CVE-2024-22294

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in IP2Location IP2Location Country Blocker.This issue affects IP2Location Country Blocker: from n/a through 2.33.3...

CVE-2021-25096

The IP2Location Country Blocker WordPress plugin before 2.26.5 bans can be bypassed by using a specific parameter in the URL...

CVE-2021-25108

The IP2Location Country Blocker WordPress plugin before 2.26.6 does not have CSRF check in the ip2locationcountryblockersaverules AJAX action, allowing attackers to make a logged in admin block arbitrary country, or block all of them at once, preventing users from accessing the frontend...

CVE-2025-39455

Cross-Site Request Forgery CSRF vulnerability in IP2Location IP2Location Variables ip2location-variables allows Reflected XSS.This issue affects IP2Location Variables: from n/a through = 2.9.5...

CVE-2025-39455

Cross-Site Request Forgery CSRF vulnerability in IP2Location IP2Location Variables ip2location-variables allows Reflected XSS.This issue affects IP2Location Variables: from n/a through = 2.9.5...

CVE-2025-39455 WordPress IP2Location Variables plugin <= 2.9.5 - CSRF to Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in IP2Location IP2Location Variables ip2location-variables allows Reflected XSS.This issue affects IP2Location Variables: from n/a through = 2.9.5...

CVE-2025-39455

CVE-2025-39455 describes a Cross-Site Request Forgery (CSRF) that enables Reflected XSS in the WordPress IP2Location Variables plugin (versions up to and including 2.9.5). Public sources (Patchstack, Red Hat, CVE lists) confirm the affected software and the vulnerability class, with CVSS v3.1 bas...

CVE-2025-39455 WordPress IP2Location Variables plugin <= 2.9.5 - CSRF to Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in ip2location IP2Location Variables allows Reflected XSS. This issue affects IP2Location Variables: from n/a through 2.9.5...

PT-2025-17014 · Unknown · Ip2Location Variables

Name of the Vulnerable Software and Affected Versions: IP2Location Variables versions n/a through 2.9.5 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Reflected XSS. Recommendations: For versions n/a through 2.9.5, update to a version later than 2.9.5 to...

WordPress plugin IP2Location Variables 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

CVE-2025-32644

Cross-Site Request Forgery CSRF vulnerability in IP2Location IP2Location World Clock ip2location-world-clock allows Stored XSS.This issue affects IP2Location World Clock: from n/a through = 1.1.9...

CVE-2025-32644

Cross-Site Request Forgery CSRF vulnerability in IP2Location IP2Location World Clock ip2location-world-clock allows Stored XSS.This issue affects IP2Location World Clock: from n/a through = 1.1.9...

CVE-2025-32644 WordPress IP2Location World Clock Plugin <= 1.1.9 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in IP2Location IP2Location World Clock ip2location-world-clock allows Stored XSS.This issue affects IP2Location World Clock: from n/a through = 1.1.9...

CVE-2025-32644

IP2Location World Clock (WordPress plugin) contains a CSRF to Stored XSS vulnerability, affecting versions up to 1.1.9. The CVE entry lists CVE-2025-32644 with a CVSSv3.1 base score of 7.1 (HIGH) and a Network attack vector, requiring user interaction. The vulnerability affects the plugin as depl...

WordPress IP2Location World Clock Plugin <= 1.1.9 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by 0xd4rk5id3 in WordPress Plugin IP2Location World Clock versions = 1.1.9...

WordPress plugin IP2Location World Clock 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

PT-2025-15811 · Ip2Location · Ip2Location Ip2Location World Clock

Name of the Vulnerable Software and Affected Versions: ip2location IP2Location World Clock versions 1.1.9 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker could potentially trick a user into performing...