Advisories · Technology

IP2Location Country Blocker.

Every CVE that names IP2Location Country Blocker among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-82530 CVE record

CVSS 6.9 Medium

IP2Location Country Blocker < 2.45.0 Access Control Bypass via X-Real-IP Header
- IP2Location Country Blocker
- Authentication bypass
Not analysed yet 9 Sept 2026
CVE-2022-50961 CVE record

CVSS 5.1 Medium

WordPress Plugin IP2Location Country Blocker 2.26.7 Stored XSS
- IP2Location Country Blocker
- Cross-site scripting (XSS)
Not analysed yet 10 May 2026
CVE-2025-1361 CVE record

CVSS 7.5 High

IP2Location Country Blocker <= 2.38.8 - Missing Authorization to Unauthenticated Information Exposure via admin_init Function
- IP2Location Country Blocker
- Broken access control
Not analysed yet 22 Feb 2025
CVE-2024-22294 CVE record

CVSS 5.3 Medium

WordPress Download IP2Location Country Blocker Plugin <= 2.33.3 is vulnerable to Sensitive Data Exposure
- IP2Location Country Blocker
- Information disclosure
Not analysed yet 24 Jan 2024
CVE-2021-25108 CVE record

IP2Location Country Blocker < 2.26.6 - Arbitrary Country Ban via CSRF
- IP2Location Country Blocker
- Cross-site request forgery (CSRF)
Not analysed yet 7 Feb 2022
CVE-2021-25096 CVE record

IP2Location Country Blocker < 2.26.5 - Ban Bypass
- IP2Location Country Blocker
- Broken access control
Not analysed yet 7 Feb 2022
CVE-2021-25095 CVE record

IP2Location Country Blocker < 2.26.5 - Subscriber+ Arbitrary Country Ban
- IP2Location Country Blocker
- Cross-site request forgery (CSRF)
- Broken access control
Not analysed yet 7 Feb 2022