CVE-2021-25096

The IP2Location Country Blocker WordPress plugin before 2.26.5 bans can be bypassed by using a specific parameter in the URL

CVSS v3.1

6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

CVSS v2.0

6.4 MEDIUMAV:N/AC:L/Au:N/C:P/I:P/A:N

EPSS

1.05% chance of exploitation in the next 30 days, 62th percentile

Published

2022-02-07

Updated

2024-08-03

Proof-of-concept exploits (1)

• https://wpscan.com/vulnerability/e6dd140e-0c9d-41dc-821e-4910a13122c1

References

• CVE Record
• NVD entry

Related

• CVE-2021-25095
• CVE-2021-25098
• CVE-2021-25094
• CVE-2021-25099
• CVE-2021-25093
• CVE-2021-25100