Webence Iq Block Country — known CVE vulnerabilities

Every CVE whose affected-product data names Webence Iq Block Country, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2022-1762 — CVSS 7.5 (high): The iQ Block Country WordPress plugin before 1.2.20 does not properly checks HTTP headers in order to validate the origin IP address…
• CVE-2021-36873 — CVSS 5.5 (medium): Authenticated Persistent Cross-Site Scripting (XSS) vulnerability in WordPress iQ Block Country plugin (versions <= 1.2.11). Vulnerable…
• CVE-2022-41155 — CVSS 5.3 (medium): Block BYPASS vulnerability in iQ Block Country plugin <= 1.2.18 on WordPress.
• CVE-2022-0246 — CVSS 4.9 (medium): The settings of the iQ Block Country WordPress plugin before 1.2.13 can be exported or imported using its backup functionality. An…