PT-2026-1604 · WordPress · Aa Block Country

Ivan Cese · Publicado 2026-01-07 · Atualizado 2026-01-07 · CVE-2025-13694

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions AA Block Country plugin for WordPress versions up to and including 1.0.1

Description The AA Block Country plugin for WordPress is susceptible to IP Address Spoofing. The plugin relies on user-provided headers, specifically the HTTP X FORWARDED FOR header, to identify the client’s IP address without sufficient validation. This lack of validation is particularly problematic when the server is located behind a trusted proxy. An unauthenticated attacker can exploit this flaw to circumvent IP-based access controls by manipulating the X-Forwarded-For header and spoofing their IP address.

Recommendations Update the AA Block Country plugin to a version beyond 1.0.1.

Correção

Enumeração de Fraquezas

CWE-348

Identificadores relacionados

CVE-2025-13694

Produtos afetados

Aa Block Country

Referências · 5

• https://wordfence.com/threat-intel/vulnerabilities/id/037ac32a-dc2e-4e9f-9318-65dfee1c80e9?source=cve · Nota
• https://plugins.trac.wordpress.org/browser/aa-block-country/tags/1.0.1/aablockcountry.php#L26 · Nota
• https://twitter.com/CVEnew/status/2008838605108646286 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-13694 · Nota de Segurança
• https://plugins.trac.wordpress.org/browser/aa-block-country/trunk/aablockcountry.php#L26 · Nota