CVE-2022-41155
Published Nov 19, 2022Block BYPASS vulnerability in iQ Block Country plugin <= 1.2.18 on WordPress.
Vendor/product archive
4 CVEs tagged to webence / iq_block_country — 0 Critical, 1 High, 3 Medium, 0 Low, 0 Unrated.
Block BYPASS vulnerability in iQ Block Country plugin <= 1.2.18 on WordPress.
The iQ Block Country WordPress plugin before 1.2.20 does not properly checks HTTP headers in order to validate the origin IP address, allowing threat actors to bypass it's block f…
The settings of the iQ Block Country WordPress plugin before 1.2.13 can be exported or imported using its backup functionality. An authorized user can import preconfigured setting…
Authenticated Persistent Cross-Site Scripting (XSS) vulnerability in WordPress iQ Block Country plugin (versions <= 1.2.11). Vulnerable parameter: &blockcountry_blockmessage.