| Package | Affected versions | Patched versions |
|---|---|---|
| country blocker | < 2.38.9 | 2.38.9 |
The IP2Location Country Blocker plugin for WordPress is vulnerable to Regular Information Exposure in all versions up to, and including, 2.38.8 due to missing capability checks on the admin_init() function. This makes it possible for unauthenticated attackers to view the plugin's settings.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free