Country Blocker
Approved changes feed: RSS · Atom
cpe:2.3:a:ip2location:country_blocker:*:*:*:*:*:wordpress:*:*
part: a version: * update: *
| Vendor | Ip2Location (f51a771b-2d04-5dee-b9c4-dd25a5c8488b) |
|---|---|
| Product | Country Blocker (402e009e-8366-5ee6-afef-80aba64383d6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/wp-plugins/ip2location-country-blocker |
purl2cpe | 2026-06-01 10:16:57.923089 |
pkg:github/wpplugins/ip2location-country-blocker |
purl2cpe | 2026-06-01 10:16:57.923090 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-24731 |
vulnerable | 2026-06-08 07:12:49.801279 |
WordPress IP2Location Country Blocker plugin <= 2.38.3 - Cross Site Scripting (XSS) vulnerability
MEDIUM (5.9)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in IP2Location Download IP2Location Country Blocker ip2location-country-blocker allows Stored XSS.This issue affects Download IP2Location Country Blocker: from n/a through <= 2.38.3.
Published: 2025-01-24T17:25:11.774Z
Updated: 2026-04-28T16:11:33.226Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-1361 |
vulnerable | 2026-06-08 07:08:36.651587 |
IP2Location Country Blocker <= 2.38.8 - Missing Authorization to Unauthenticated Information Exposure via admin_init Function
HIGH (7.5)
The IP2Location Country Blocker plugin for WordPress is vulnerable to Regular Information Exposure in all versions up to, and including, 2.38.8 due to missing capability checks on the admin_init() function. This makes it possible for unauthenticated attackers to view the plugin's settings.
Published: 2025-02-22T08:22:06.982Z
Updated: 2026-04-08T17:17:23.404Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-32443 |
vulnerable | 2026-06-08 06:35:33.133163 |
WordPress IP2Location Country Blocker plugin <= 2.34.2 - Cross Site Request Forgery (CSRF) vulnerability
MEDIUM (4.3)
Cross-Site Request Forgery (CSRF) vulnerability in IP2Location Download IP2Location Country Blocker.This issue affects Download IP2Location Country Blocker: from n/a through 2.34.2.
Published: 2024-04-15T07:59:39.985Z
Updated: 2026-04-28T16:09:35.657Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-22294 |
vulnerable | 2026-06-08 06:29:34.449727 |
WordPress Download IP2Location Country Blocker Plugin <= 2.33.3 is vulnerable to Sensitive Data Exposure
MEDIUM (5.3)
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in IP2Location IP2Location Country Blocker.This issue affects IP2Location Country Blocker: from n/a through 2.33.3.
Published: 2024-01-24T12:05:22.624Z
Updated: 2026-04-28T16:09:09.299Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37865 |
vulnerable | 2026-06-08 06:08:16.048384 |
WordPress IP2Location Country Blocker plugin <= 2.29.1 - IP Bypass Vulnerability vulnerability
MEDIUM (5.3)
Authentication Bypass by Spoofing vulnerability in IP2Location Download IP2Location Country Blocker allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Download IP2Location Country Blocker: from n/a through 2.29.1.
Published: 2024-06-04T07:11:42.671Z
Updated: 2026-04-28T16:08:32.153Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-25108 |
vulnerable | 2026-06-08 05:30:39.975283 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-25096 |
vulnerable | 2026-06-08 05:30:39.953782 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-25095 |
vulnerable | 2026-06-08 05:30:39.953342 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.