Country Blocker
1 CVEs
product
Monthly
The IP2Location Country Blocker plugin for WordPress is vulnerable to Regular Information Exposure in all versions up to, and including, 2.38.8 due to missing capability checks on the admin_init(). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
WordPress
Information Disclosure
Authentication Bypass
Country Blocker
PHP
NVD
CVSS 3.1
7.5
EPSS
0.5%
EPSS 0%
CVSS 7.5
HIGH
PATCH
This Week
The IP2Location Country Blocker plugin for WordPress is vulnerable to Regular Information Exposure in all versions up to, and including, 2.38.8 due to missing capability checks on the admin_init(). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
WordPress
Information Disclosure
Authentication Bypass
+2
NVD