Skip to main content

Iq Block Country CVE-2022-41155

CRITICAL
Improper Access Control (CWE-284)
2022-11-19 audit@patchstack.com
Authentication Bypass WordPress Iq Block Country
9.8
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
9.8 CRITICAL
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Nov 19, 2022 - 00:15 nvd
CRITICAL 9.8

DescriptionNVD

Block BYPASS vulnerability in iQ Block Country plugin <= 1.2.18 on WordPress.

AnalysisAI

Block BYPASS vulnerability in iQ Block Country plugin <= 1.2.18 on WordPress. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-284. Block BYPASS vulnerability in iQ Block Country plugin <= 1.2.18 on WordPress. Affected products include: Webence Iq Block Country.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Iq Block Country

View all
CVE-2022-1762 HIGH POC
7.5 Jun 13

The iQ Block Country WordPress plugin before 1.2.20 does not properly checks HTTP headers in order to validate the origi
CVE-2021-36873 MEDIUM POC
5.4 Sep 23

Authenticated Persistent Cross-Site Scripting (XSS) vulnerability in WordPress iQ Block Country plugin (versions <= 1.2.
CVE-2022-0246 MEDIUM POC
4.9 Apr 11

The settings of the iQ Block Country WordPress plugin before 1.2.13 can be exported or imported using its backup functio

Same weakness CWE-284 – Improper Access Control

View all
CVE-2012-4681 CRITICAL POC
9.8
CVE-2011-3544 CRITICAL POC
9.8
CVE-2012-1723 CRITICAL POC
9.8
CVE-2012-5076 CRITICAL POC
9.8
CVE-2014-3120 HIGH POC
8.1
CVE-2013-2423 LOW POC
3.7
CVE-2016-3427 CRITICAL
9.8
CVE-2025-12480 CRITICAL POC
9.1

Same technique Authentication Bypass

View all
CVE-2023-22515 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2013-2465 CRITICAL POC
9.8
CVE-2011-3544 CRITICAL POC
9.8
CVE-2012-1723 CRITICAL POC
9.8
CVE-2017-10271 HIGH POC
7.5
CVE-2015-1427 CRITICAL POC
9.8
CVE-2025-3248 CRITICAL POC
9.8

Share

CVE-2022-41155 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy