Lucene search
K

120 matches found

Nuclei
Nuclei
added 9 hours ago5 views

IP2Location Country Blocker < 2.38.9 - Unauthenticated Information Disclosure

IP2Location Country Blocker plugin for WordPress up to version 2.38.8 contains a regular information exposure caused by missing capability checks on admininit, letting unauthenticated attackers view plugin settings, exploit requires no special conditions. id: CVE-2025-1361 info: name: IP2Location...

7.5CVSS7.7AI score0.19125EPSS
Exploits0References3
EUVD
EUVD
added 2026/05/10 3:31 p.m.4 views

EUVD-2022-55982

WordPress Plugin IP2Location Country Blocker 2.26.7 contains a stored cross-site scripting vulnerability that allows authenticated users to inject arbitrary JavaScript code through the Frontend Settings interface. Attackers can inject malicious scripts in the URL field of the Display page setting...

6.4CVSS5.9AI score0.00032EPSS
Exploits0References4
NVD
NVD
added 2026/05/10 1:16 p.m.11 views

CVE-2022-50961

WordPress Plugin IP2Location Country Blocker 2.26.7 contains a stored cross-site scripting vulnerability that allows authenticated users to inject arbitrary JavaScript code through the Frontend Settings interface. Attackers can inject malicious scripts in the URL field of the Display page setting...

6.4CVSS0.00032EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/05/10 12:12 p.m.6 views

CVE-2022-50961 WordPress Plugin IP2Location Country Blocker 2.26.7 Stored XSS

WordPress Plugin IP2Location Country Blocker 2.26.7 contains a stored cross-site scripting vulnerability that allows authenticated users to inject arbitrary JavaScript code through the Frontend Settings interface. Attackers can inject malicious scripts in the URL field of the Display page setting...

6.4CVSS5.9AI score0.00032EPSS
Exploits0References3
CVE
CVE
added 2026/05/10 12:12 p.m.6 views

CVE-2022-50961

CVE-2022-50961 affects WordPress plugin IP2Location Country Blocker (v2.26.7). The stored XSS vulnerability allows authenticated users to inject arbitrary JavaScript via the Frontend Settings page, specifically by injecting scripts in the URL field of the Display page settings. The payload execut...

6.4CVSS5.9AI score0.00032EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/05/10 12:12 p.m.2 views

CVE-2022-50961

WordPress Plugin IP2Location Country Blocker 2.26.7 contains a stored cross-site scripting vulnerability that allows authenticated users to inject arbitrary JavaScript code through the Frontend Settings interface. Attackers can inject malicious scripts in the URL field of the Display page setting...

6.4CVSS5.9AI score0.00032EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2026/05/10 12:12 p.m.26 views

CVE-2022-50961 WordPress Plugin IP2Location Country Blocker 2.26.7 Stored XSS

WordPress Plugin IP2Location Country Blocker 2.26.7 contains a stored cross-site scripting vulnerability that allows authenticated users to inject arbitrary JavaScript code through the Frontend Settings interface. Attackers can inject malicious scripts in the URL field of the Display page setting...

6.4CVSS0.00032EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/05/10 12:0 a.m.4 views

WordPress plugin IP2Location Country Blocker 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

6.4CVSS5.6AI score0.00032EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/05/10 12:0 a.m.5 views

PT-2026-39486

WordPress Plugin IP2Location Country Blocker 2.26.7 contains a stored cross-site scripting vulnerability that allows authenticated users to inject arbitrary JavaScript code through the Frontend Settings interface. Attackers can inject malicious scripts in the URL field of the Display page setting...

6.4CVSS5.9AI score0.00032EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2026/01/07 9:17 a.m.3 views

CVE-2025-1502

The IP2Location Redirection plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'downloadip2locationredirectionbackup' AJAX action in all versions up to, and including, 1.33.3. This makes it possible for unauthenticated attackers to download...

5.3CVSS6.7AI score0.00173EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:11 a.m.8 views

CVE-2025-1361

The IP2Location Country Blocker plugin for WordPress is vulnerable to Regular Information Exposure in all versions up to, and including, 2.38.8 due to missing capability checks on the admininit function. This makes it possible for unauthenticated attackers to view the plugin's settings...

7.5CVSS6.7AI score0.19125EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2021-12020

Malware in sbrugna...

7.1CVSS6.8AI score0.00089EPSS
Exploits2References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.18 views

EUVD-2021-12007

Malware in sbrugna...

7.1CVSS6.8AI score0.00148EPSS
Exploits2References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-5888

Malicious code in bioql PyPI...

5.3CVSS8.7AI score0.00173EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-3923

Malicious code in bioql PyPI...

5.9CVSS9AI score0.00089EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-10576

Malicious code in bioql PyPI...

7.1CVSS7.7AI score0.00296EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-41739

Malicious code in bioql PyPI...

5.3CVSS8.6AI score0.00114EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-4441

Malicious code in bioql PyPI...

7.5CVSS9.1AI score0.19125EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/03 8:7 p.m.0 views

EUVD-2025-11782

Malicious code in bioql PyPI...

7.1CVSS7.7AI score0.0016EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-19855

Malicious code in bioql PyPI...

7.5CVSS8.1AI score0.00282EPSS
Exploits0References1
Rows per page
Query Builder