IP2Location records

8 published records for vendor ip2location.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 50%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

8 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
35Monitor	CVE-2024-32443No exploit	WordPress IP2Location Country Blocker plugin <= 2.34.2 - Cross Site Request Forgery (CSRF) vulnerabilityip2location · country blocker · CWE-352 Pre-auth CSRF	High8.8	—	0.2%	Apr 15, 2024
30Monitor	CVE-2024-22294No exploit	WordPress Download IP2Location Country Blocker Plugin <= 2.33.3 is vulnerable to Sensitive Data Exposureip2location · country blocker · CWE-200 Pre-auth Info leak	High7.5	—	0.5%	Jan 24, 2024
28Monitor	CVE-2021-25095No exploit	IP2Location Country Blocker < 2.26.5 - Subscriber+ Arbitrary Country Banip2location · country blocker · CWE-352 CSRF	High7.1	—	0.5%	Feb 7, 2022
28Monitor	CVE-2021-25108No exploit	IP2Location Country Blocker < 2.26.6 - Arbitrary Country Ban via CSRFip2location · country blocker · CWE-352 Pre-auth CSRF	High7.1	—	0.5%	Feb 7, 2022
26Monitor	CVE-2021-25096No exploit	IP2Location Country Blocker < 2.26.5 - Ban Bypassip2location · country blocker · CWE-639 Pre-auth Broken access control (IDOR)	Medium6.5	—	1.0%	Feb 7, 2022
21Monitor	CVE-2025-1361Proof of concept	IP2Location Country Blocker <= 2.38.8 - Missing Authorization to Unauthenticated Information Exposure via admin_init Functionip2location · country blocker · CWE-285 Pre-auth Broken access control (IDOR)	Medium5.3	—	1.3%	Feb 22, 2025
21Monitor	CVE-2023-37865No exploit	WordPress IP2Location Country Blocker plugin <= 2.29.1 - IP Bypass Vulnerability vulnerabilityip2location · country blocker · CWE-290 Pre-auth Auth bypass	Medium5.3	—	0.4%	Jun 4, 2024
19Monitor	CVE-2025-24731No exploit	WordPress IP2Location Country Blocker plugin <= 2.38.3 - Cross Site Scripting (XSS) vulnerabilityip2location · country blocker · CWE-79 XSS	Medium4.8	—	0.3%	Jan 24, 2025

CVE-2024-32443
35Monitor
WordPress IP2Location Country Blocker plugin <= 2.34.2 - Cross Site Request Forgery (CSRF) vulnerability
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- CSRF
ip2location · country blockerApr 15, 2024
CVE-2024-22294
30Monitor
WordPress Download IP2Location Country Blocker Plugin <= 2.33.3 is vulnerable to Sensitive Data Exposure
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Info leak
ip2location · country blockerJan 24, 2024
CVE-2021-25095
28Monitor
IP2Location Country Blocker < 2.26.5 - Subscriber+ Arbitrary Country Ban
HighCVSS 7.1No exploitEPSS 1%
- CSRF
ip2location · country blockerFeb 7, 2022
CVE-2021-25108
28Monitor
IP2Location Country Blocker < 2.26.6 - Arbitrary Country Ban via CSRF
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- CSRF
ip2location · country blockerFeb 7, 2022
CVE-2021-25096
26Monitor
IP2Location Country Blocker < 2.26.5 - Ban Bypass
MediumCVSS 6.5No exploitEPSS 1%
- Pre-auth
- Broken access control (IDOR)
ip2location · country blockerFeb 7, 2022
CVE-2025-1361
21Monitor
IP2Location Country Blocker <= 2.38.8 - Missing Authorization to Unauthenticated Information Exposure via admin_init Function
MediumCVSS 5.3Proof of conceptEPSS 1%
- Pre-auth
- Broken access control (IDOR)
ip2location · country blockerFeb 22, 2025
CVE-2023-37865
21Monitor
WordPress IP2Location Country Blocker plugin <= 2.29.1 - IP Bypass Vulnerability vulnerability
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
- Auth bypass
ip2location · country blockerJun 4, 2024
CVE-2025-24731
19Monitor
WordPress IP2Location Country Blocker plugin <= 2.38.3 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 4.8No exploitEPSS 0%
- XSS
ip2location · country blockerJan 24, 2025