CVE-2022-41155
WordPress iQ Block Country plugin <= 1.2.18 - Block BYPASS vulnerability
Block BYPASS vulnerability in iQ Block Country plugin <= 1.2.18 on WordPress.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- Low
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
WordPress iQ Block Country plugin <= 1.2.18 - Block BYPASS vulnerability
Block BYPASS vulnerability in iQ Block Country plugin <= 1.2.18 on WordPress.
- Record
CVE-2022-41155- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - Weakness
- CWE-284
- Updated
- 2026-11-02
EUVDEUVD-2022-44396
Block BYPASS vulnerability in iQ Block Country plugin <= 1.2.18 on WordPress.
- Record
EUVD-2022-44396- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-89h5-3m3x-c8hj
Block BYPASS vulnerability in iQ Block Country plugin <= 1.2.18 on WordPress.
Block BYPASS vulnerability in iQ Block Country plugin <= 1.2.18 on WordPress.
- Record
GHSA-89h5-3m3x-c8hj- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-284, CWE-863
- Updated
- 2026-11-02
NVD
Block BYPASS vulnerability in iQ Block Country plugin <= 1.2.18 on WordPress.
- Record
CVE-2022-41155- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-284
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-41155 is a medium vulnerability (CVSS 5.3) in Webence Iq Block Country, published November 18, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.75%, the 55th percentile. No source names a fixed version.