VendorsIP2Locationcountry_blockerany version
Vulnerabilities

IP2Location Country Blocker any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

8CVEs
CVE-2024-32443
WordPress IP2Location Country Blocker plugin <= 2.34.2 - Cross Site Request Forgery (CSRF) vulnerability
Published 2024-04-15 · Modified
8.8EPSS 0.002
CVE-2025-1361
IP2Location Country Blocker <= 2.38.8 - Missing Authorization to Unauthenticated Information Exposure via admin_init Function
Published 2025-02-22 · Analyzed
7.5EPSS 0.013
CVE-2024-22294
WordPress Download IP2Location Country Blocker Plugin <= 2.33.3 is vulnerable to Sensitive Data Exposure
Published 2024-01-24 · Modified
7.5EPSS 0.005
CVE-2021-25095
IP2Location Country Blocker < 2.26.5 - Subscriber+ Arbitrary Country Ban
Published 2022-02-07 · Modified
7.1EPSS 0.005
CVE-2021-25108
IP2Location Country Blocker < 2.26.6 - Arbitrary Country Ban via CSRF
Published 2022-02-07 · Modified
7.1EPSS 0.005
CVE-2021-25096
IP2Location Country Blocker < 2.26.5 - Ban Bypass
Published 2022-02-07 · Modified
6.5EPSS 0.010
CVE-2025-24731
WordPress IP2Location Country Blocker plugin <= 2.38.3 - Cross Site Scripting (XSS) vulnerability
Published 2025-01-24 · Modified
5.9EPSS 0.003
CVE-2023-37865
WordPress IP2Location Country Blocker plugin <= 2.29.1 - IP Bypass Vulnerability vulnerability
Published 2024-06-04 · Analyzed
5.3EPSS 0.004