Country Blocker Security Vulnerabilities and Issues — Country Blocker CVE List

Lucene search

Ip2locationCountry Blocker

4 matches found

CVE•added 2025/02/22 9:15 a.m.•48 views

CVE-2025-1361

The IP2Location Country Blocker plugin for WordPress is vulnerable to Regular Information Exposure in all versions up to, and including, 2.38.8 due to missing capability checks on the admin_init() function. This makes it possible for unauthenticated attackers to view the plugin's settings.

7.5CVSS7.3AI score0.00109EPSS

CVE•added 2022/02/07 4:15 p.m.•37 views

CVE-2021-25095

The IP2Location Country Blocker WordPress plugin before 2.26.5 does not have authorisation and CSRF checks in the ip2location_country_blocker_save_rules AJAX action, allowing any authenticated users, such as subscriber to call it and block arbitrary country, or block all of them at once, preventing...

7.1CVSS6.9AI score0.0016EPSS

Web

CVE•added 2022/02/07 4:15 p.m.•34 views

CVE-2021-25108

The IP2Location Country Blocker WordPress plugin before 2.26.6 does not have CSRF check in the ip2location_country_blocker_save_rules AJAX action, allowing attackers to make a logged in admin block arbitrary country, or block all of them at once, preventing users from accessing the frontend.

7.1CVSS6.8AI score0.00089EPSS

Web

CVE•added 2024/01/24 12:15 p.m.•30 views

CVE-2024-22294

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in IP2Location IP2Location Country Blocker.This issue affects IP2Location Country Blocker: from n/a through 2.33.3.

7.5CVSS7.6AI score0.00282EPSS