Log in Start free

IP2Location

Products

ProductCVEsExploitedLatest
IP2Location Country Blocker4–Sep 9, 2026
Download IP2Location Country Blocker3–Jan 24, 2025
IP2Location Redirection1–Mar 1, 2025
IP2Location Variables1–Apr 17, 2025
IP2Location World Clock1–Apr 9, 2025

Exploited and recent CVEs

  • CVE-2026-82530 Medium 5.3 IP2Location Country Blocker < 2.45.0 Access Control Bypass via X-Real-IP Header 0.4%
  • CVE-2022-50961 Medium 6.4 WordPress Plugin IP2Location Country Blocker 2.26.7 Stored XSS 0.2%
  • CVE-2025-39455 High 7.1 WordPress IP2Location Variables plugin <= 2.9.5 - CSRF to Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-32644 High 7.1 WordPress IP2Location World Clock Plugin <= 1.1.9 - CSRF to Stored XSS vulnerability 0.2%
  • CVE-2025-1502 Medium 5.3 IP2Location Redirection <= 1.33.3 - Missing Authorization to Unauthenticated Settings Export 0.3%
  • CVE-2025-1361 High 7.5 IP2Location Country Blocker <= 2.38.8 - Missing Authorization to Unauthenticated Information Exposure via admin_init Function 1.3%
  • CVE-2025-24731 Medium 5.9 WordPress IP2Location Country Blocker plugin <= 2.38.3 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2023-37865 Medium 5.3 WordPress IP2Location Country Blocker plugin <= 2.29.1 - IP Bypass Vulnerability vulnerability 0.4%
  • CVE-2024-32443 Medium 4.3 WordPress IP2Location Country Blocker plugin <= 2.34.2 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2024-22294 Medium 5.3 WordPress Download IP2Location Country Blocker Plugin <= 2.33.3 is vulnerable to Sensitive Data Exposure 0.5%