Skip to content
OpenAdvisories

Product · IP2Location

IP2Location Country Blocker

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-82530

    IP2Location Country Blocker < 2.45.0 Access Control Bypass via X-Real-IP Header

    IP2Location Country Blocker plugin for WordPress before 2.45.0 contains an access control bypass vulnerability that allows unauthenticated remote attackers to circumvent IP-based restrictions by forging the X-Real-IP HTTP header. Attackers can set the X-Real-…

    IP2Location IP2Location Country Blocker Web / CMS
  • Medium 6.4
    CVE-2022-50961

    WordPress Plugin IP2Location Country Blocker 2.26.7 Stored XSS

    WordPress Plugin IP2Location Country Blocker 2.26.7 contains a stored cross-site scripting vulnerability that allows authenticated users to inject arbitrary JavaScript code through the Frontend Settings interface. Attackers can inject malicious scripts in the…

    IP2Location IP2Location Country Blocker Web / CMS
  • Medium 5.3
    CVE-2024-22294

    WordPress Download IP2Location Country Blocker Plugin <= 2.33.3 is vulnerable to Sensitive Data Exposure

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in IP2Location IP2Location Country Blocker.This issue affects IP2Location Country Blocker: from n/a through 2.33.3.

    IP2Location IP2Location Country Blocker