cve.bz

CVE-2025-1361

5.3 mediumEPSS 1.3%

Medium (5.3) in ip2location country blocker. EPSS 1.3% chance of exploitation in the next 30 days.

The IP2Location Country Blocker plugin for WordPress is vulnerable to Regular Information Exposure in all versions up to, and including, 2.38.8 due to missing capability checks on the admin_init() function. This makes it possible for unauthenticated attackers to view the plugin's settings.

Severity

CVSS 3.1

5.3 medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS
1.3% chance of exploitation in the next 30 days; higher than 70% of CVEs (scores of 2026-10-31)
CWEs
CWE-285, CWE-862
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON