CVE-2021-25096: IP2LOCATION Country Blocker

Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days.

The IP2Location Country Blocker WordPress plugin before 2.26.5 bans can be bypassed by using a specific parameter in the URL

Affected products

• IP2LOCATION Country Blocker: before 2.26.5 (fixed in 2.26.5)

Published 2022-02-07. Last modified 2026-06-17.