Cross-Site Request Forgery

Every one of the 5 is a mark on the map. Named now: 1 to 5, most at risk first.

1. IP2Location Country Blocker < 2.26.5 - Subscriber+ Arbitrary Country BanCVE-2021-25095Ip2location · 0.5% likely

   CWE-352

2. IP2Location Country Blocker < 2.26.6 - Arbitrary Country Ban via CSRFCVE-2021-25108Ip2location · 0.5% likely

   CWE-352

3. WordPress IP2Location Country Blocker plugin <= 2.34.2 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2024-32443IP2Location · CVSS 4.3 · 0.2% likely

   CWE-352

4. WordPress IP2Location World Clock Plugin <= 1.1.9 - CSRF to Stored XSS vulnerabilityCVE-2025-32644IP2Location · CVSS 7.1 · 0.2% likely

   CWE-352

5. WordPress IP2Location Variables plugin <= 2.9.5 - CSRF to Cross Site Scripting (XSS) vulnerabilityCVE-2025-39455IP2Location · CVSS 7.1 · 0.2% likely

   CWE-352

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.