IP2Location Country Blocker

Vulnerabilities 11Slug ip2location-country-blockerLatest version 2.41.2WordPress.org →

Minimum safe version

2.38.9

Update to 2.38.9 or later to address 10 fixable vulnerabilities

Latest available2.41.2 ✓⚠ 1 vulnerability has no fix

Medium 6.4 Unfixed

2026-05-10≤ 2.26.7

CVE-2022-50961

CVE EUVD

High 7.5

2025-02-22< 2.38.9

IP2Location Country Blocker <= 2.38.8 - Missing Authorization to Unauthenticated Information Exposure via admin_init Function

EUVD Wordfence CVE

Medium 5.9

2025-01-24< 2.38.4

CVE-2025-24731

CVE Patchstack Wordfence EUVD

High 8.8

2024-04-15< 2.34.3

CVE-2024-32443

CVE Wordfence Patchstack

Medium 5.3

2024-01-24< 2.33.4

CVE-2024-22294

CVE Patchstack Wordfence WPScan

Medium 5.3

2024-06-04< 2.29.2

CVE-2023-37865

CVE Patchstack Wordfence

N/A

< 2.26.9

IP2Location Country Blocker < 2.26.9 - Admin+ Stored Cross-Site Scripting

WPScan

N/A

2022-02-07< 2.26.9

IP2Location Country Blocker < 2.26.9 - Authenticated Stored Cross-Site Scripting

Wordfence

High 7.1

2025-10-03< 2.26.6

CVE-2021-25108

EUVD CVE Patchstack Wordfence WPScan

Medium 6.5

2025-10-03< 2.26.5

CVE-2021-25096

EUVD CVE Patchstack Wordfence WPScan

High 7.1

2025-10-03< 2.26.5

CVE-2021-25095

EUVD CVE Patchstack Wordfence WPScan