What’s Vulnerable › Products

IP2Location Country Blocker vulnerabilities

10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your IP2Location Country Blocker version is affected

Latest IP2Location Country Blocker vulnerabilities

• CVE-2026-82530 — IP2Location Country Blocker < 2.45.0 Access Control Bypass via X-Real-IP Header (CVSS 5.3)
• CVE-2022-50961 — WordPress Plugin IP2Location Country Blocker 2.26.7 Stored XSS (CVSS 6.4)
• CVE-2025-1361 — IP2Location Country Blocker <= 2.38.8 - Missing Authorization to Unauthenticated Information Exposure via admin_init Function (CVSS 5.3)
• CVE-2025-24731 — WordPress IP2Location Country Blocker plugin <= 2.38.3 - Cross Site Scripting (XSS) vulnerability (CVSS 4.8)
• CVE-2023-37865 — WordPress IP2Location Country Blocker plugin <= 2.29.1 - IP Bypass Vulnerability vulnerability (CVSS 5.3)
• CVE-2024-32443 — WordPress IP2Location Country Blocker plugin <= 2.34.2 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 8.8)
• CVE-2024-22294 — WordPress Download IP2Location Country Blocker Plugin <= 2.33.3 is vulnerable to Sensitive Data Exposure (CVSS 7.5)
• CVE-2021-25108 — IP2Location Country Blocker < 2.26.6 - Arbitrary Country Ban via CSRF (CVSS 7.1)
• CVE-2021-25096 — IP2Location Country Blocker < 2.26.5 - Ban Bypass (CVSS 6.5)
• CVE-2021-25095 — IP2Location Country Blocker < 2.26.5 - Subscriber+ Arbitrary Country Ban (CVSS 7.1)