IP2Location Vulnerabilities and Affected Products
Vulnerabilities associated with IP2Location Variables.
Products
Clear product- Download IP2Location Country Blocker3 vulnerabilities
- IP2Location Country Blocker3 vulnerabilities
- IP2Location Redirection1 vulnerability
- IP2Location Variables1 vulnerability
- IP2Location World Clock1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2025-39455HIGH | WordPress IP2Location Variables plugin <= 2.9.5 - CSRF to Cross Site Scripting (XSS) vulnerabilityCross-Site Request Forgery (CSRF) vulnerability in IP2Location IP2Location Variables ip2location-variables allows Reflected XSS.This issue affects IP2Location Variables: from n/a through <= 2.9.5. CWE-352Apr 17, 2025 | CVSS7.1v3.1 | EPSS0.143% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |