Iq Block Country
Approved changes feed: RSS · Atom
cpe:2.3:a:webence:iq_block_country:*:*:*:*:*:wordpress:*:*part: a version: * update: *
| Vendor | Webence (4c596f9f-aff0-5ed1-b2cd-7c43faa503a9) |
|---|---|
| Product | Iq Block Country (7a671576-4749-5a57-86a3-5592f08865c3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-41155 |
vulnerable | 2026-06-08 05:48:29.949287 |
WordPress iQ Block Country plugin <= 1.2.18 - Block BYPASS vulnerability
MEDIUM (5.3)
Block BYPASS vulnerability in iQ Block Country plugin <= 1.2.18 on WordPress.
Published: 2022-11-18T23:17:37.654Z
Updated: 2026-04-28T16:07:49.148Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1762 |
vulnerable | 2026-06-08 05:39:13.873110 |
iQ Block Country < 1.2.20 - Protection Bypass due to IP Spoofing
The iQ Block Country WordPress plugin before 1.2.20 does not properly checks HTTP headers in order to validate the origin IP address, allowing threat actors to bypass it's block feature by spoofing the headers.
Published: 2022-06-13T12:42:39.000Z
Updated: 2024-08-03T00:16:59.806Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0246 |
vulnerable | 2026-06-08 05:39:09.597558 |
iQ Block Country < 1.2.13 - Admin+ Arbitrary File Deletion via Zip Slip
The settings of the iQ Block Country WordPress plugin before 1.2.13 can be exported or imported using its backup functionality. An authorized user can import preconfigured settings of the plugin by uploading a zip file. After the uploading process, files in the uploaded zip file are extracted one by one. During the extraction process, existence of a file is checked. If the file exists, it is deleted without any security control by only considering the name of the extracted file. This behavior leads to "Zip Slip" vulnerability.
Published: 2022-04-11T14:40:40.000Z
Updated: 2024-08-02T23:18:42.823Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36873 |
vulnerable | 2026-06-08 05:32:52.648810 |
WordPress iQ Block Country plugin <= 1.2.11 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerability
MEDIUM (5.5)
Authenticated Persistent Cross-Site Scripting (XSS) vulnerability in WordPress iQ Block Country plugin (versions <= 1.2.11). Vulnerable parameter: &blockcountry_blockmessage.
Published: 2021-09-23T15:07:44.186Z
Updated: 2026-04-28T16:07:35.893Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.