PT-2022-9651
CVE-2021-25096
·
Published
2022-02-07
·
Updated
2022-02-10
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
IP2Location Country Blocker WordPress plugin versions prior to 2.26.5
Description
The issue allows bans to be bypassed by using a specific parameter in the URL.
Recommendations
For versions prior to 2.26.5, update to version 2.26.5 or later to resolve the issue. As a temporary workaround, consider restricting access to URLs that contain the specific parameter until a patch is available.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾