CVE-2025-1361
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Feb 22, 2025
Updated: Mar 6, 2025
CWE ID 285
Summary
CVE-2025-1361 is a vulnerability affecting the IP2Location Country Blocker plugin for WordPress. In versions up to 2.38.8, the plugin fails to implement capability checks on the admin_init() function, leading to unauthenticated attackers gaining access to the plugin's settings. This issue can result in exposing sensitive information, posing a significant risk to WordPress sites using the IP2Location Country Blocker plugin. Administrators are advised to upgrade to the latest version of the plugin as soon as possible to mitigate this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share