Information Exposure Vulnerability in IP2Location Country Blocker Plugin for WordPress

CVE-2025-1361

What is CVE-2025-1361?

The IP2Location Country Blocker plugin for WordPress has a vulnerability that allows unauthenticated attackers to access and view sensitive plugin settings. This issue arises from insufficient capability checks in the admin_init() function, affecting all versions up to and including 2.38.8. Website administrators should be aware of this vulnerability as it can lead to unauthorized information disclosure.

References