Ip2location

12 CVEs across 6 Ip2location products. Browse Ip2location vulnerabilities, severities, and proof-of-concept exploits.

Ip2location products with known CVEs

ProductCVEs
Country Blocker8
Download Ip2location Country Blocker3
Ip2location Country Blocker3
Ip2location Redirection1
Ip2location Variables1
Ip2location World Clock1
Ip2location CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2022-50961Medium6.42026-05-10WordPress Plugin IP2Location Country Blocker 2.26.7 contains a stored cross-site scripting vulnerability that allows authenticated users to inject arbitrary Ja…
CVE-2025-39455High7.12025-04-17Cross-Site Request Forgery (CSRF) vulnerability in IP2Location IP2Location Variables ip2location-variables allows Reflected XSS.This issue affects IP2Location…
CVE-2025-32644High7.12025-04-09Cross-Site Request Forgery (CSRF) vulnerability in IP2Location IP2Location World Clock ip2location-world-clock allows Stored XSS.This issue affects IP2Location…
CVE-2025-1502Medium5.32025-03-01The IP2Location Redirection plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'download_ip2location_re…
CVE-2025-1361High7.52025-02-22The IP2Location Country Blocker plugin for WordPress is vulnerable to Regular Information Exposure in all versions up to, and including, 2.38.8 due to missing…
CVE-2025-24731Medium5.92025-01-24Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in IP2Location Download IP2Location Country Blocker ip2locat…
CVE-2023-37865Medium5.32024-06-04Authentication Bypass by Spoofing vulnerability in IP2Location Download IP2Location Country Blocker allows Accessing Functionality Not Properly Constrained by…
CVE-2024-32443Medium4.32024-04-15Cross-Site Request Forgery (CSRF) vulnerability in IP2Location Download IP2Location Country Blocker.This issue affects Download IP2Location Country Blocker: fr…
CVE-2024-22294Medium5.32024-01-24Exposure of Sensitive Information to an Unauthorized Actor vulnerability in IP2Location IP2Location Country Blocker.This issue affects IP2Location Country Bloc…
CVE-2021-25108High7.12022-02-07The IP2Location Country Blocker WordPress plugin before 2.26.6 does not have CSRF check in the ip2location_country_blocker_save_rules AJAX action, allowing att…
CVE-2021-25096Medium6.52022-02-07The IP2Location Country Blocker WordPress plugin before 2.26.5 bans can be bypassed by using a specific parameter in the URL
CVE-2021-25095High7.12022-02-07The IP2Location Country Blocker WordPress plugin before 2.26.5 does not have authorisation and CSRF checks in the ip2location_country_blocker_save_rules AJAX a…