Lucene search

K
wpvulndbWpvulndbWPVDB-ID:2E84D0EC-27B3-4862-8279-7F31B03EEE4F
HistoryJan 22, 2024 - 12:00 a.m.

IP2Location Country Blocker < 2.33.4 - Unauthenticated Sensitive Information Exposure via Debug Log File

2024-01-2200:00:00
wpscan.com
10
ip2location
country blocker
vulnerable
wordpress
unauthenticated
sensitive information
exposure
debug log file

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.2%

Description The IP2Location Country Blocker plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.33.3 via ip2location-country-blocker.php. This makes it possible for unauthenticated attackers to extract sensitive data including debug information.

CPENameOperatorVersion
eq2.33.4

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.2%

Related for WPVDB-ID:2E84D0EC-27B3-4862-8279-7F31B03EEE4F