CVE-2021-36873: Webence Iq Block Country

Medium severity, CVSS 5.4. EPSS: 1.2% chance of exploitation in the next 30 days.

Authenticated Persistent Cross-Site Scripting (XSS) vulnerability in WordPress iQ Block Country plugin (versions <= 1.2.11). Vulnerable parameter: &blockcountry_blockmessage.

Affected products

• Webence Iq Block Country: up to and including 1.2.11

Published 2021-09-23. Last modified 2026-06-17.