Skip to content
OpenAdvisories

Vendor

aaextensions

1 known vulnerabilities.

Products

AA Block country 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2025-13694

    AA Block country <= 1.0.1 - Unauthenticated IP Address Spoofing via X-Forwarded-For Header

    The AA Block Country plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 1.0.1. This is due to the plugin trusting user-supplied headers such as HTTP_X_FORWARDED_FOR to determine the client's IP address without proper v…

    aaextensions AA Block country Web / CMS