IP2Location vulnerabilities
We track 4 vulnerabilities in IP2Location products across 5 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on April 17, 2025.
Latest IP2Location vulnerabilities
- 7.1 High severity
IP2Location Variables: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in IP2Location IP2Location Variables ip2location-variables allows Reflected XSS.This issue affects IP2Location Variables: from n/a through <= 2.9.5.
- 7.1 High severity
IP2Location World Clock: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in IP2Location IP2Location World Clock ip2location-world-clock allows Stored XSS.This issue affects IP2Location World Clock: from n/a through <= 1.1.9.
- 8.8 High severity
Download IP2Location Country Blocker: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in IP2Location Download IP2Location Country Blocker.This issue affects Download IP2Location Country Blocker: from n/a through 2.34.2.
- 7.5 High severity
IP2Location Country Blocker: Exposure of Sensitive Information to an Unauthorized Actor
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in IP2Location IP2Location Country Blocker.This issue affects IP2Location Country Blocker: from n/a through 2.33.3.