IP
Vendor
Ip2location
10
CVEs
0
On KEV
0
New 30D
Products
CB8.8
Country Blocker
Ip2location
8 CVEs0 on KEV0 new
IC6.4
IP2Location Country Blocker
IP2Location
2 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-82530 | IC IP2Location Country Blocker IP2Location | 5.3 | Sep 9 | IP2Location Country Blocker < 2.45.0 Access Control Bypass via X-Real-IP Header |
| CVE-2022-50961 | IC IP2Location Country Blocker IP2Location | 6.4 | May 10 | WordPress Plugin IP2Location Country Blocker 2.26.7 Stored XSS |
| CVE-2025-1361 | CB Country Blocker Ip2location | 5.3 | Feb 22 | The IP2Location Country Blocker plugin for WordPress is vulnerable to Regular Information Exposure in all versions up to, and including, 2.38.8 due to missing capability checks on… |
| CVE-2025-24731 | CB Country Blocker Ip2location | 4.8 | Jan 24 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in IP2Location Download IP2Location Country Blocker ip2location-country-blocker… |
| CVE-2023-37865 | CB Country Blocker Ip2location | 5.3 | Jun 4 | Authentication Bypass by Spoofing vulnerability in IP2Location Download IP2Location Country Blocker allows Accessing Functionality Not Properly Constrained by ACLs.This issue… |
| CVE-2024-32443 | CB Country Blocker Ip2location | 8.8 | Apr 15 | Cross-Site Request Forgery (CSRF) vulnerability in IP2Location Download IP2Location Country Blocker.This issue affects Download IP2Location Country Blocker: from n/a through… |
| CVE-2024-22294 | CB Country Blocker Ip2location | 7.5 | Jan 24 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in IP2Location IP2Location Country Blocker.This issue affects IP2Location Country Blocker: from n/a… |
| CVE-2021-25108 | CB Country Blocker Ip2location | 7.1 | Feb 7 | The IP2Location Country Blocker WordPress plugin before 2.26.6 does not have CSRF check in the ip2location_country_blocker_save_rules AJAX action, allowing attackers to make a… |
| CVE-2021-25096 | CB Country Blocker Ip2location | 6.5 | Feb 7 | The IP2Location Country Blocker WordPress plugin before 2.26.5 bans can be bypassed by using a specific parameter in the URL |
| CVE-2021-25095 | CB Country Blocker Ip2location | 7.1 | Feb 7 | The IP2Location Country Blocker WordPress plugin before 2.26.5 does not have authorisation and CSRF checks in the ip2location_country_blocker_save_rules AJAX action, allowing any… |