CVE-2025-1361

CVE-2025-1361 affects the IP2Location Country Blocker WordPress plugin. The vulnerability stems from missing capability checks in admin_init(), enabling unauthenticated attackers to view the plugin’s settings. It affects all versions up to and including 2.38.8. The connected Red Hat and Wordfence...

CVE-2025-24731

CVE-2025-24731 = Stored Cross-Site Scripting in WordPress plugin “IP2Location Country Blocker” (versions up to 2.38.3). The issue arises from improper input neutralization during web page generation, enabling attackers to inject malicious scripts that could be stored and later executed in unsuspe...

CVE-2024-32443

CVE-2024-32443 is a CSRF vulnerability in the IP2Location Download IP2Location Country Blocker (WordPress plugin). Affected software: IP2Location Country Blocker Download, from n/a through 2.34.2. The vulnerability has high impact per NVD metrics (confidentiality, integrity, and availability all ...

CVE-2021-25096

The CVE-2021-25096 affects the WordPress plugin IP2Location Country Blocker prior to version 2.26.5 . The vulnerability enables a ban bypass by supplying a specific parameter in the URL (e.g., examples like ?admin-ajax=hehe). This is a URL-parameter-based bypass that undermines access controls wi...

CVE-2021-25095

The CVE describes a authorization/CSRF flaw in the WordPress plugin IP2Location Country Blocker, versions prior to 2.26.5. The ip2location_country_blocker_save_rules AJAX action lacks proper checks, allowing any authenticated user (e.g., a subscriber) to block arbitrary countries or all countries...

CVE-2021-25108

CVE-2021-25108 affects the WordPress IP2Location Country Blocker plugin (versions before 2.26.6). The root cause is missing CSRF protection in the ip2location_country_blocker_save_rules AJAX action, enabling an attacker with logged-in admin privileges to ban a specific country or all countries, b...

CVE-2023-37865

CVE-2023-37865 affects the WordPress plugin IP2Location Country Blocker (versions

CVE-2024-22294

CVE-2024-22294 affects the WordPress plugin IP2Location Country Blocker, classified as Information Disclosure. Public sources confirm that versions up to 2.33.3 store or expose sensitive data via a debug/log mechanism, allowing unauthenticated access to sensitive information. Remediation is to up...