Vulnerabilities > CVE-2021-25096 - Authorization Bypass Through User-Controlled Key vulnerability in Ip2Location Country Blocker

047910
CVSS 6.5 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
LOW
Integrity impact
LOW
Availability impact
NONE
network
low complexity
ip2location
CWE-639
NVD
Published: 2022-02-07
Updated: 2022-02-10

Summary

The IP2Location Country Blocker WordPress plugin before 2.26.5 bans can be bypassed by using a specific parameter in the URL

Vulnerable Configurations

Part Description Count
Application
Ip2Location
97

Common Weakness Enumeration (CWE)

References