Vulnerabilities > CVE-2021-25096 - Authorization Bypass Through User-Controlled Key vulnerability in Ip2Location Country Blocker

047910
CVSS 6.4 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
NONE
network
low complexity
ip2location
CWE-639

Summary

The IP2Location Country Blocker WordPress plugin before 2.26.5 bans can be bypassed by using a specific parameter in the URL

Vulnerable Configurations

Part Description Count
Application
Ip2Location
97