Skip to content
OpenAdvisories

Vendor

IP2Location

10 known vulnerabilities.

Products

IP2Location Country Blocker 4 Download IP2Location Country Blocker 3 IP2Location World Clock 1 IP2Location Variables 1 IP2Location Redirection 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-82530

    IP2Location Country Blocker < 2.45.0 Access Control Bypass via X-Real-IP Header

    IP2Location Country Blocker plugin for WordPress before 2.45.0 contains an access control bypass vulnerability that allows unauthenticated remote attackers to circumvent IP-based restrictions by forging the X-Real-IP HTTP header. Attackers can set the X-Real-…

    IP2Location IP2Location Country Blocker Web / CMS
  • Medium 6.4
    CVE-2022-50961

    WordPress Plugin IP2Location Country Blocker 2.26.7 Stored XSS

    WordPress Plugin IP2Location Country Blocker 2.26.7 contains a stored cross-site scripting vulnerability that allows authenticated users to inject arbitrary JavaScript code through the Frontend Settings interface. Attackers can inject malicious scripts in the…

    IP2Location IP2Location Country Blocker Web / CMS
  • Medium 5.3
    CVE-2025-1502

    IP2Location Redirection <= 1.33.3 - Missing Authorization to Unauthenticated Settings Export

    The IP2Location Redirection plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'download_ip2location_redirection_backup' AJAX action in all versions up to, and including, 1.33.3. This makes it possible f…

    IP2Location IP2Location Redirection Web / CMS
  • Medium 5.9
    CVE-2025-24731

    WordPress IP2Location Country Blocker plugin <= 2.38.3 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in IP2Location Download IP2Location Country Blocker ip2location-country-blocker allows Stored XSS.This issue affects Download IP2Location Country Blocker: from …

    IP2Location Download IP2Location Country Blocker
  • Medium 5.3
    CVE-2023-37865

    WordPress IP2Location Country Blocker plugin <= 2.29.1 - IP Bypass Vulnerability vulnerability

    Authentication Bypass by Spoofing vulnerability in IP2Location Download IP2Location Country Blocker allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Download IP2Location Country Blocker: from n/a through 2.29.1.

    IP2Location Download IP2Location Country Blocker
  • Medium 4.3
    CVE-2024-32443

    WordPress IP2Location Country Blocker plugin <= 2.34.2 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in IP2Location Download IP2Location Country Blocker.This issue affects Download IP2Location Country Blocker: from n/a through 2.34.2.

    IP2Location Download IP2Location Country Blocker
  • Medium 5.3
    CVE-2024-22294

    WordPress Download IP2Location Country Blocker Plugin <= 2.33.3 is vulnerable to Sensitive Data Exposure

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in IP2Location IP2Location Country Blocker.This issue affects IP2Location Country Blocker: from n/a through 2.33.3.

    IP2Location IP2Location Country Blocker