CVE-2021-25096

The IP2Location Country Blocker WordPress plugin before 2.26.5 bans can be bypassed by using a specific parameter in the URL...

CVE-2021-25096

The CVE-2021-25096 affects the WordPress plugin IP2Location Country Blocker prior to version 2.26.5 . The vulnerability enables a ban bypass by supplying a specific parameter in the URL (e.g., examples like ?admin-ajax=hehe). This is a URL-parameter-based bypass that undermines access controls wi...