TI-2022-19674 CVE-2022-41155 · GHSA-89h5-3m3x-c8hj
WordPress iQ Block Country plugin <= 1.2.18 - Block BYPASS vulnerability
Priority MEDIUM 49
Block BYPASS vulnerability in iQ Block Country plugin <= 1.2.18 on WordPress.
Webence
Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Webence records in CISA KEVNo Webence vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
4 records
TI-2022-01628 CVE-2022-1762 · GHSA-78xv-3xpm-3hcq
iQ Block Country < 1.2.20 - Protection Bypass due to IP Spoofing
Priority LOW 35
The iQ Block Country WordPress plugin before 1.2.20 does not properly checks HTTP headers in order to validate the origin IP address, allowing threat actors to bypass it's block feature by spoofing the headers.
TI-2022-00181 CVE-2022-0246 · GHSA-cxp6-jhjh-h4hg
iQ Block Country < 1.2.13 - Admin+ Arbitrary File Deletion via Zip Slip
Priority LOW 28
The settings of the iQ Block Country WordPress plugin before 1.2.13 can be exported or imported using its backup functionality.
TI-2021-14965 CVE-2021-36873 · GHSA-5mcg-fw36-rwf2
WordPress iQ Block Country plugin <= 1.2.11 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerability
Priority LOW 27
Authenticated Persistent Cross-Site Scripting (XSS) vulnerability in WordPress iQ Block Country plugin (versions <= 1.2.11).