IP2Location vulnerabilities
10 published CVEs name IP2Location among the affected products.
- 10Published CVEs10 of them scored
- 2Last 12 monthspublished in the last year
- 0Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-82530
IP2Location Country Blocker < 2.45.0 Access Control Bypass via X-Real-IP Header
IP2Location · IP2Location Country Blocker
Medium6.9 - CVE-2022-50961
WordPress Plugin IP2Location Country Blocker 2.26.7 Stored XSS
IP2Location · IP2Location Country Blocker
Medium5.1 - CVE-2025-39455
WordPress IP2Location Variables plugin <= 2.9.5 - CSRF to Cross Site Scripting (XSS) vulnerability
IP2Location · IP2Location Variables
High7.1 - CVE-2025-32644
WordPress IP2Location World Clock Plugin <= 1.1.9 - CSRF to Stored XSS vulnerability
IP2Location · IP2Location World Clock
High7.1 - CVE-2025-1502
IP2Location Redirection <= 1.33.3 - Missing Authorization to Unauthenticated Settings Export
ip2location · IP2Location Redirection
Medium5.3 - CVE-2025-1361
IP2Location Country Blocker <= 2.38.8 - Missing Authorization to Unauthenticated Information Exposure via admin_init Function
ip2location · IP2Location Country Blocker
High7.5 - CVE-2025-24731
WordPress IP2Location Country Blocker plugin <= 2.38.3 - Cross Site Scripting (XSS) vulnerability
IP2Location · Download IP2Location Country Blocker
Medium5.9 - CVE-2023-37865
WordPress IP2Location Country Blocker plugin <= 2.29.1 - IP Bypass Vulnerability vulnerability
IP2Location · Download IP2Location Country Blocker
Medium5.3 - CVE-2024-32443
WordPress IP2Location Country Blocker plugin <= 2.34.2 - Cross Site Request Forgery (CSRF) vulnerability
IP2Location · Download IP2Location Country Blocker
Medium4.3 - CVE-2024-22294
WordPress Download IP2Location Country Blocker Plugin <= 2.33.3 is vulnerable to Sensitive Data Exposure
IP2Location · IP2Location Country Blocker
Medium5.3