TI-2022-00181 Aliases CVE-2022-0246 GHSA-cxp6-jhjh-h4hg

iQ Block Country < 1.2.13 - Admin+ Arbitrary File Deletion via Zip Slip

LOW 28CWE-73Published 2022-04-11 · Updated 2024-08-02

Key facts

Attack vector: Network
Privileges required: High
User interaction: None
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: None · High · None
Fix status: Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

The settings of the iQ Block Country WordPress plugin before 1.2.13 can be exported or imported using its backup functionality. An authorized user can import preconfigured settings of the plugin by uploading a zip file. After the uploading process, files in the uploaded zip file are extracted one by one. During the extraction process, existence of a file is checked. If the file exists, it is deleted without any security control by only considering the name of the extracted file. This behavior leads to "Zip Slip" vulnerability.

Why it matters now

EPSS 0.03367 88th percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by NVD

Fix Fixed iQ Block Country (Unknown): 1.2.13

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Unknown	iQ Block Country	1.2.13 to before 1.2.13	1.2.13	Patch available	CNA

iQ Block Country VendorUnknown Affected 1.2.13 to before 1.2.13 Fixed in 1.2.13 Patch available CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:webence:iq_block_country::::::wordpress::*	before 1.2.13	Vulnerable	Webence

cpe:2.3:a:webence:iq_block_country:*:*:*:*:*:wordpress:*:* Versions before 1.2.13 Vulnerable ·Webence

Remediation

Fix · CNA iQ Block Country (Unknown) Fixed in 1.2.13

Timeline

2026-10-02 Threatist record created from CVE-2022-0246
2026-10-03 Alias added: GHSA-cxp6-jhjh-h4hg

References

Exploit 1

https://wpscan.com/vulnerability/892802b1-26e2-4ce1-be6f-71ce29687776

TI-2022-19674 WordPress iQ Block Country plugin <= 1.2.18 - Block BYPASS vulnerability CVSS 3.1CRITICAL 9.8
TI-2022-01628 iQ Block Country < 1.2.20 - Protection Bypass due to IP Spoofing CVSS 3.1HIGH 7.5
TI-2021-14965 WordPress iQ Block Country plugin <= 1.2.11 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerability CVSS 3.1MEDIUM 5.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences