CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Authentication Bypass by Spoofing vulnerability in IP2Location Download IP2Location Country Blocker allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Download IP2Location Country Blocker: from n/a through 2.29.1.
Explanation of Vulnerability in Simple Terms
The IP2Location Country Blocker plugin contains an authentication bypass vulnerability that allows unauthenticated attackers to modify plugin settings over the network. The vulnerability stems from improper validation of requests, enabling attackers to alter configuration without proper authorization checks. This could lead to unauthorized changes to country blocking rules or other plugin functionality.
What an attacker can do
Modify plugin settings and configuration without authentication.
Potential impact on your site
Attackers can change country blocking rules or disable the plugin's protection without your knowledge.
Conditions required to exploit
Network access to the WordPress site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
