CVE-2021-25096CWE-639

CVE-2021-25096: vulnerability in IP2Location Country Blocker

IP2Location Country Blocker < 2.26.5 - Ban Bypass

Published · Updated

Follow this CVE+ Monitor IP2Location Country Blocker

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.0%
The IP2Location Country Blocker WordPress plugin before 2.26.5 bans can be bypassed by using a specific parameter in the URL
Affected products
Unknown · IP2Location Country Blocker
Related CVEs — IP2Location Country Blocker

In the same product, most dangerous first.

CVE-2021-25095—IP2Location Country Blocker < 2.26.5 - Subscriber+ Arbitrary Country BanEPSS 0.5%CVE-2021-25108—IP2Location Country Blocker < 2.26.6 - Arbitrary Country Ban via CSRFEPSS 0.5%