IP2Location vulnerabilities

CVEs per yearBy the year they were published

1. 20243
2. 20255
3. 20262

Newest CVEs

• CVE-2026-82530

  IP2Location Country Blocker < 2.45.0 Access Control Bypass via X-Real-IP Header

  IP2Location · IP2Location Country Blocker

  Medium6.9
• CVE-2022-50961

  WordPress Plugin IP2Location Country Blocker 2.26.7 Stored XSS

  IP2Location · IP2Location Country Blocker

  Medium5.1
• CVE-2025-39455

  WordPress IP2Location Variables plugin <= 2.9.5 - CSRF to Cross Site Scripting (XSS) vulnerability

  IP2Location · IP2Location Variables

  High7.1
• CVE-2025-32644

  WordPress IP2Location World Clock Plugin <= 1.1.9 - CSRF to Stored XSS vulnerability

  IP2Location · IP2Location World Clock

  High7.1
• CVE-2025-1502

  IP2Location Redirection <= 1.33.3 - Missing Authorization to Unauthenticated Settings Export

  ip2location · IP2Location Redirection

  Medium5.3
• CVE-2025-1361

  IP2Location Country Blocker <= 2.38.8 - Missing Authorization to Unauthenticated Information Exposure via admin_init Function

  ip2location · IP2Location Country Blocker

  High7.5
• CVE-2025-24731

  WordPress IP2Location Country Blocker plugin <= 2.38.3 - Cross Site Scripting (XSS) vulnerability

  IP2Location · Download IP2Location Country Blocker

  Medium5.9
• CVE-2023-37865

  WordPress IP2Location Country Blocker plugin <= 2.29.1 - IP Bypass Vulnerability vulnerability

  IP2Location · Download IP2Location Country Blocker

  Medium5.3
• CVE-2024-32443

  WordPress IP2Location Country Blocker plugin <= 2.34.2 - Cross Site Request Forgery (CSRF) vulnerability

  IP2Location · Download IP2Location Country Blocker

  Medium4.3
• CVE-2024-22294

  WordPress Download IP2Location Country Blocker Plugin <= 2.33.3 is vulnerable to Sensitive Data Exposure

  IP2Location · IP2Location Country Blocker

  Medium5.3