medium5.3
CVE-2026-82530
IP2Location Country Blocker plugin for WordPress before 2.45.0 contains an access control bypass vulnerability that allows unauthenticated remote attackers to …
Impact
IP2Location Country Blocker plugin for WordPress before 2.45.0 contains an access control bypass vulnerability that allows unauthenticated remote attackers to circumvent IP-based restrictions by forging the X-Real-IP HTTP header. Attackers can set the X-Real-IP header to an allowlisted IP address to bypass page, link, or site-wide access restrictions and access otherwise-blocked resources.
Affected products
| Product | Affected versions |
|---|---|
| IP2Location Country Blocker Plugin For WordPress | before 2.45.0 |
Versions were read from the advisory text. No structured product data has been published for this record yet.