IP2Location Redirection

IP2Location Redirection has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10.

The most common weakness is Missing Authorization, behind 1 of the records (100%).

The one issue recorded for IP2Location Redirection has a vendor fix available, so running the current release closes it.

All of these findings were reported by Krzysztof Zając. IP2Location Redirection is installed on roughly 7,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium
5.3/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all IP2Location Redirection vulnerabilities before they are exploited.

Highest severity on recordCVSS 5.3CVE-2025-1502

IP2Location Redirection <= 1.33.3 - Missing Authorization to Unauthenticated Settings Export

Read the full analysis

Vulnerability Records

1 records
IP2Location Redirection banner
Latestv1.42.0

IP2Location Redirection

IP2Location

Author

IP2Location

4.3(43)
86/100
Last Updated
2026-09-02 (11d ago)
Active Installs
7,000+
Downloads
543,474
Requires WP
4.6+
Requires PHP
7.4+
Tested up to
WP 7.1
Created
2014-10-20 (12y ago)

This plugin will NOT work if any cache plugin is enabled. As the name suggests itself, IP2Location Redirection is one of the most favorite plugins recommended to handle the task of redirection on a website or a custom predefined URL based on country and region geolocated by IP address. It is a very simple yet powerful redirection plugin that helps you to manage all your website redirects including 301 & 302 redirection. With the ability of detecting IP address geolocation information, it can redirect the visitors to another location with ease even if you are unfamiliar with Apache .htaccess files. Key Features Redirects visitors to a blog page based on their country and region Redirects visitors to a predefined URL based on their country and region Allows you to configure multiple redirection rules as needed Supports 301 & 302 redirection Supports IPv4 and IPv6 Reduce old or broken links and help your website with the SEO site rankings This redirection plugin supports both IP2Location IP geolocation BIN data and web service for IP address geolocation lookup. If you are using the BIN data, you can update the BIN data every month by using the wizard on the settings page for the accurate result. Alternatively, you can also manually download and update the BIN data file using the below links: BIN file download: IP2Location Commercial database | IP2Location LITE database To use the IP2Location IP geolocation web service (REST API) for geolocation, you’ll need to register an account at IP2Location.io IP Geolocation API. A free plan is available. More Information Please visit us at https://www.ip2location.com

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C