Ip2Location Country Blocker
Approved changes feed: RSS · Atom
cpe:2.3:a:ip2location:ip2location_country_blocker:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Ip2Location (f51a771b-2d04-5dee-b9c4-dd25a5c8488b) |
|---|---|
| Product | Ip2Location Country Blocker (4c650ffc-1874-58da-9650-6609350c99a5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-1361 |
vulnerable | 2026-06-08 07:08:36.650443 |
IP2Location Country Blocker <= 2.38.8 - Missing Authorization to Unauthenticated Information Exposure via admin_init Function
HIGH (7.5)
The IP2Location Country Blocker plugin for WordPress is vulnerable to Regular Information Exposure in all versions up to, and including, 2.38.8 due to missing capability checks on the admin_init() function. This makes it possible for unauthenticated attackers to view the plugin's settings.
Published: 2025-02-22T08:22:06.982Z
Updated: 2026-04-08T17:17:23.404Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-22294 |
vulnerable | 2026-06-08 06:29:34.448752 |
WordPress Download IP2Location Country Blocker Plugin <= 2.33.3 is vulnerable to Sensitive Data Exposure
MEDIUM (5.3)
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in IP2Location IP2Location Country Blocker.This issue affects IP2Location Country Blocker: from n/a through 2.33.3.
Published: 2024-01-24T12:05:22.624Z
Updated: 2026-04-28T16:09:09.299Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-50961 |
vulnerable | 2026-06-08 05:52:03.784503 |
WordPress Plugin IP2Location Country Blocker 2.26.7 Stored XSS
MEDIUM (6.4)
WordPress Plugin IP2Location Country Blocker 2.26.7 contains a stored cross-site scripting vulnerability that allows authenticated users to inject arbitrary JavaScript code through the Frontend Settings interface. Attackers can inject malicious scripts in the URL field of the Display page settings that execute when administrators or other authenticated users visit the plugin settings page.
Published: 2026-05-10T12:12:55.027Z
Updated: 2026-05-24T01:37:29.432Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.