High severity7.5NVD Advisory· Published Jun 13, 2022· Updated Jun 17, 2026

CVE-2022-1762

Description

The iQ Block Country WordPress plugin before 1.2.20 does not properly checks HTTP headers in order to validate the origin IP address, allowing threat actors to bypass it's block feature by spoofing the headers.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Webence/Iq Block Country
cpe:2.3:a:webence:iq_block_country:*:*:*:*:*:wordpress:*:*
Range: <=1.2.13
WordPress/Aa Block Countrycpe-rescue
Package: https://wordpress.org/plugins/aa-block-country
WordPress/iQ Block Countryllm-fuzzy
Range: <1.2.20

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/03254977-37cc-4365-979b-326f9637be85nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000