Security Advisory

CVE-2021-25108

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-02-07 15:47:24

Last updated 2024-08-03 19:56:10

Assigner WPScan

State PUBLISHED

Description

The IP2Location Country Blocker WordPress plugin before 2.26.6 does not have CSRF check in the ip2location_country_blocker_save_rules AJAX action, allowing attackers to make a logged in admin block arbitrary country, or block all of them at once, preventing users from accessing the frontend.

← Browse all CVEs View on cve.org ↗