Ip2location - vulnerabilities (CVEs)
13 CVEs in 6 products, 0 in the last 30 days, newest from 2026-09-09.
Products
- Country Blocker - 10 CVEs
- Download Ip2location Country Blocker - 3 CVEs
- Ip2location Country Blocker - 2 CVEs
- Ip2location Redirection - 1 CVEs
- Ip2location Variables - 1 CVEs
- Ip2location World Clock - 1 CVEs
Newest CVEs of Ip2location
- CVE-2026-82530 - CVSS 6.9 (medium), 2026-09-09: IP2Location Country Blocker plugin for WordPress before 2.45.0 contains an access control bypass vulnerability that allows unauthenticated remote attackers to…
- CVE-2022-50961 - CVSS 6.4 (medium), 2026-05-10: WordPress Plugin IP2Location Country Blocker 2.26.7 contains a stored cross-site scripting vulnerability that allows authenticated users to inject arbitrary…
- CVE-2025-39455 - CVSS 7.1 (high), 2025-04-17: Cross-Site Request Forgery (CSRF) vulnerability in IP2Location IP2Location Variables ip2location-variables allows Reflected XSS.This issue affects IP2Location…
- CVE-2025-32644 - CVSS 7.1 (high), 2025-04-09: Cross-Site Request Forgery (CSRF) vulnerability in IP2Location IP2Location World Clock ip2location-world-clock allows Stored XSS.This issue affects…
- CVE-2025-1502 - CVSS 5.3 (medium), 2025-03-01: The IP2Location Redirection plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the…
- CVE-2025-1361 - CVSS 7.5 (high), 2025-02-22: The IP2Location Country Blocker plugin for WordPress is vulnerable to Regular Information Exposure in all versions up to, and including, 2.38.8 due to missing…
- CVE-2025-24731 - CVSS 5.9 (medium), 2025-01-24: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in IP2Location Download IP2Location Country Blocker…
- CVE-2023-37865 - CVSS 5.3 (medium), 2024-06-04: Authentication Bypass by Spoofing vulnerability in IP2Location Download IP2Location Country Blocker allows Accessing Functionality Not Properly Constrained by…
- CVE-2024-32443 - CVSS 8.8 (high), 2024-04-15: Cross-Site Request Forgery (CSRF) vulnerability in IP2Location Download IP2Location Country Blocker.This issue affects Download IP2Location Country Blocker:…
- CVE-2024-22294 - CVSS 7.5 (high), 2024-01-24: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in IP2Location IP2Location Country Blocker.This issue affects IP2Location Country…
- CVE-2021-25108 - CVSS 7.1 (high), 2022-02-07: The IP2Location Country Blocker WordPress plugin before 2.26.6 does not have CSRF check in the ip2location_country_blocker_save_rules AJAX action, allowing…
- CVE-2021-25096 - CVSS 6.5 (medium), 2022-02-07: The IP2Location Country Blocker WordPress plugin before 2.26.5 bans can be bypassed by using a specific parameter in the URL
- CVE-2021-25095 - CVSS 7.1 (high), 2022-02-07: The IP2Location Country Blocker WordPress plugin before 2.26.5 does not have authorisation and CSRF checks in the ip2location_country_blocker_save_rules AJAX…
