The IP2Location Country Blocker plugin for WordPress is vulnerable to Regular Information Exposure in all versions up to, and including, 2.38.8 due to missing capability checks on the admin_init() function. This makes it possible for unauthenticated attackers to view the plugin's settings.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ip2location Country Blocker Plugin | — | Update ip2location-country-blocker plugin to version 2.38.9, or a newer patched version | May 15, 2025 | Feb 21, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub