Skip to content
OpenAdvisories

Vendor

IP2Location

10 known vulnerabilities.

Products

IP2Location Country Blocker 4 Download IP2Location Country Blocker 3 IP2Location World Clock 1 IP2Location Variables 1 IP2Location Redirection 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.1
    CVE-2025-39455

    WordPress IP2Location Variables plugin <= 2.9.5 - CSRF to Cross Site Scripting (XSS) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in IP2Location IP2Location Variables ip2location-variables allows Reflected XSS.This issue affects IP2Location Variables: from n/a through <= 2.9.5.

    IP2Location IP2Location Variables
  • High 7.1
    CVE-2025-32644

    WordPress IP2Location World Clock Plugin <= 1.1.9 - CSRF to Stored XSS vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in IP2Location IP2Location World Clock ip2location-world-clock allows Stored XSS.This issue affects IP2Location World Clock: from n/a through <= 1.1.9.

    IP2Location IP2Location World Clock
  • High 7.5
    CVE-2025-1361

    IP2Location Country Blocker <= 2.38.8 - Missing Authorization to Unauthenticated Information Exposure via admin_init Function

    The IP2Location Country Blocker plugin for WordPress is vulnerable to Regular Information Exposure in all versions up to, and including, 2.38.8 due to missing capability checks on the admin_init() function. This makes it possible for unauthenticated attackers…

    IP2Location IP2Location Country Blocker Web / CMS