[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fyk2ldYSiASn91wDNG0wTDcwD09O4hyDuvXu6tmb5LD4":3,"$fkagYCNOhl0e_EjzsMlHObijJEN80Y0YI9uCBIg5rNHk":270,"$fXhbjITr2zn9Mnp_D7581Mxxm2GuI2aknfr5g5D0FnCI":275},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":22,"download_link":23,"security_score":24,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":26,"discovery_status":27,"vulnerabilities":28,"developer":29,"crawl_stats":25,"alternatives":35,"analysis":142,"fingerprints":240},"restrict-country-access","Restrict Country Access","1.1.0","Bili Plugins","https:\u002F\u002Fprofiles.wordpress.org\u002Fbiliplugins\u002F","\u003Cp>Sometimes we need to block access of WordPress site in some Country.\u003C\u002Fp>\n\u003Cp>This plugin will fulfill the requirement of Restricting WordPress site in selected Country.\u003C\u002Fp>\n\u003Ch3>How to use?\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Go to “Block Country” tab in backend.\u003C\u002Fli>\n\u003Cli>Select Country which you want to restrict. ( You can select Multiple countries as well )\u003C\u002Fli>\n\u003Cli>Select Page where you want to redirect Restricted Country.\u003C\u002Fli>\n\u003C\u002Ful>\n","Sometimes we need to block access of WordPress site in some Country.",40,4268,0,"2023-01-10T07:43:00.000Z","6.1.10","4.0","5.6",[19,20,21],"biliplugins","block-country","blockcountry","https:\u002F\u002Fbhargavb.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Frestrict-country-access.1.1.0.zip",85,null,"2026-04-16T10:56:18.058Z","no_bundle",[],{"slug":19,"display_name":7,"profile_url":8,"plugin_count":30,"total_installs":31,"avg_security_score":24,"avg_patch_time_days":32,"trust_score":33,"computed_at":34},4,50,30,84,"2026-05-20T02:11:40.233Z",[36,61,84,103,125],{"slug":37,"name":38,"version":39,"author":40,"author_profile":41,"description":42,"short_description":43,"active_installs":44,"downloaded":45,"rating":33,"num_ratings":46,"last_updated":47,"tested_up_to":48,"requires_at_least":49,"requires_php":50,"tags":51,"homepage":56,"download_link":57,"security_score":58,"vuln_count":59,"unpatched_count":13,"last_vuln_date":60,"fetched_at":26},"ip2location-country-blocker","IP2Location Country Blocker","2.41.2","IP2Location","https:\u002F\u002Fprofiles.wordpress.org\u002Fip2location\u002F","\u003Cp>\u003Cem>This plugin will NOT work if any cache plugin is enabled.\u003C\u002Fem>\u003C\u002Fp>\n\u003Cp>This plugin enables user to block unwanted traffic from accessing your frontend (blog pages) or backend (admin area) by countries or proxy servers. It helps to reduce spam and unwanted sign ups easily by preventing unwanted visitors from browsing a particular page or entire website.\u003C\u002Fp>\n\u003Cp>Key Features\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Allow you to block the access from multiple countries.\u003C\u002Fli>\n\u003Cli>Allow you to block the access by country grouping, such as EU, APAC, and so on.\u003C\u002Fli>\n\u003Cli>Allow you to block the access from anonymous proxies.\u003C\u002Fli>\n\u003Cli>Allow you to block the access by IP ranges.\u003C\u002Fli>\n\u003Cli>Allow you to whitelist the crawler, for example, Google, Bing, Yandex, and so on, to index your pages (SEO friendly).\u003C\u002Fli>\n\u003Cli>Supports IPv4 and IPv6\u003C\u002Fli>\n\u003Cli>Default to 403 error (Permission Denied) display\u003C\u002Fli>\n\u003Cli>Allow you to customize your own 403 page.\u003C\u002Fli>\n\u003Cli>Send you an email notification if some one is trying to access your admin area.\u003C\u002Fli>\n\u003Cli>Provide you statistical report of traffics blocked.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>This plugin supports both IP2Location BIN data and web service for IP geolocation lookup. If you would like to use the IP2Location geolocation BIN data, you can easily download and update the BIN data via the plugin settings page. Alternatively, you can also download and update the BIN data file manually using the below links:\u003C\u002Fp>\n\u003Cp>IP Geolocation file download:\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Flite.ip2location.com\" title=\"IP2Location LITE database\" rel=\"nofollow ugc\">IP2Location & IP2Proxy LITE database (Free)\u003C\u002Fa>\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fip2location.com\" title=\"IP2Location commercial database\" rel=\"nofollow ugc\">IP2Location & IP2Proxy Commercial database (Comprehensive)\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>To use the IP2Location IP geolocation web service (REST API) for geolocation, you’ll need to register an account at \u003Ca href=\"https:\u002F\u002Fwww.ip2location.io\" title=\"IP2Location.io IP Geolocation API\" rel=\"nofollow ugc\">IP2Location.io IP Geolocation API\u003C\u002Fa>. A free plan is available.\u003C\u002Fp>\n\u003Ch4>More Information\u003C\u002Fh4>\n\u003Cp>Please visit us at \u003Ca href=\"https:\u002F\u002Fwww.ip2location.com\" title=\"https:\u002F\u002Fwww.ip2location.com\" rel=\"nofollow ugc\">https:\u002F\u002Fwww.ip2location.com\u003C\u002Fa>\u003C\u002Fp>\n","Blocks unwanted visitors from accessing your frontend (blog pages) or backend (admin area) by countries or proxy servers.",30000,1636207,124,"2025-12-03T07:19:00.000Z","6.9.4","4.6","7.4",[20,52,53,54,55],"block-proxy","ip-address","ip2location","redirection","https:\u002F\u002Fip2location.com\u002Fresources\u002Fwordpress-ip2location-country-blocker","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fip2location-country-blocker.2.41.2.zip",93,9,"2025-02-21 19:56:54",{"slug":62,"name":63,"version":64,"author":65,"author_profile":66,"description":67,"short_description":68,"active_installs":69,"downloaded":70,"rating":71,"num_ratings":72,"last_updated":73,"tested_up_to":48,"requires_at_least":74,"requires_php":75,"tags":76,"homepage":81,"download_link":82,"security_score":83,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":26},"login-ip-country-restriction","Login IP & Country Restriction","6.8.1","Iulia Cazan","https:\u002F\u002Fprofiles.wordpress.org\u002Fiulia-cazan\u002F","\u003Cp>This plugin hooks in the authenticate filter. By default, the plugin is set to allow all access and you can configure the plugin to allow the login only from some specified IPs or the specified countries. PLEASE MAKE SURE THAT YOU CONFIGURE THE PLUGIN TO ALLOW YOUR OWN ACCESS. If you set a restriction by IP, then you have to add your own IP (if you are using the plugin in a local setup the IP is 127.0.0.1 or ::1, this is added in your list by default). If you set a restriction by country, then you have to select from the list of countries at least your country. Both types of restrictions work independent, so you can set only one type of restriction or both if you want. Also, you can configure the redirects to frontpage when the URLs are accessed by someone that has a restriction. The restriction is either by country, or not in the specified IPs list.\u003C\u002Fp>\n\u003Ch3>License\u003C\u002Fh3>\n\u003Cp>This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.\u003C\u002Fp>\n","Tighten your website security and fight against dictionary bot attacks originating from other countries, by denying access.",7000,113472,92,51,"2025-11-22T14:06:00.000Z","5.1","7.2",[20,77,78,79,80],"block-ip","country-firewall","country-restriction","login-restriction","https:\u002F\u002Fiuliacazan.ro\u002Flogin-ip-country-restriction\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Flogin-ip-country-restriction.6.8.1.zip",100,{"slug":85,"name":86,"version":87,"author":88,"author_profile":89,"description":90,"short_description":91,"active_installs":92,"downloaded":93,"rating":83,"num_ratings":94,"last_updated":95,"tested_up_to":48,"requires_at_least":96,"requires_php":97,"tags":98,"homepage":97,"download_link":102,"security_score":83,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":26},"country-access-blocker","Country Access Blocker","1.6","Valeri Kluger","https:\u002F\u002Fprofiles.wordpress.org\u002Fvalerikluger\u002F","\u003Cp>Country Access Blocker lets you restrict or allow access to your WordPress site based on visitor countries.\u003C\u002Fp>\n\u003Cp>Features:\u003Cbr \u002F>\n* Block visitors from specific countries\u003Cbr \u002F>\n* Clean, GDPR-compliant country list\u003Cbr \u002F>\n* Easy admin interface to configure blocked countries\u003Cbr \u002F>\n* Enable or disable IP-based country blocking with one checkbox\u003Cbr \u002F>\n* No external dependencies or WooCommerce required\u003Cbr \u002F>\n* Uses ip-api.com free API for geolocation\u003C\u002Fp>\n\u003Cp>This plugin is ideal if you want to restrict access from certain countries or comply with geo-based regulations.\u003C\u002Fp>\n\u003Ch3>License\u003C\u002Fh3>\n\u003Cp>This plugin is licensed under the GPLv2 or later.\u003C\u002Fp>\n\u003Ch3>Support\u003C\u002Fh3>\n\u003Cp>For support or bug reports, please open an issue on the plugin’s GitHub repository or contact the author.\u003C\u002Fp>\n","Block or allow website visitors from specific countries based on IP geolocation.",600,2056,2,"2026-01-24T22:53:00.000Z","5.0","",[20,77,99,100,101],"country-blocker","geo-blocking","ip-blocker","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcountry-access-blocker.1.6.zip",{"slug":20,"name":104,"version":105,"author":106,"author_profile":107,"description":108,"short_description":109,"active_installs":110,"downloaded":111,"rating":112,"num_ratings":113,"last_updated":114,"tested_up_to":115,"requires_at_least":116,"requires_php":97,"tags":117,"homepage":120,"download_link":121,"security_score":122,"vuln_count":123,"unpatched_count":123,"last_vuln_date":124,"fetched_at":26},"Block Country","1.0","nitinmaurya12","https:\u002F\u002Fprofiles.wordpress.org\u002Fnitinmaurya12\u002F","\u003Cp>Set country and IP to block your website. You can also set IP address to unblock for any special IP Address.\u003C\u002Fp>\n","Set country and IP to block your website. You can also set IP address to unblock for any special IP Address.",70,5788,60,6,"2013-12-10T22:05:00.000Z","3.6.1","3.2",[20,118,119],"block-ip-address","unblock-any-ip-address","http:\u002F\u002Fnitinmaurya.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fblock-country.zip",63,1,"2025-10-13 00:00:00",{"slug":126,"name":127,"version":128,"author":129,"author_profile":130,"description":131,"short_description":132,"active_installs":32,"downloaded":133,"rating":83,"num_ratings":123,"last_updated":134,"tested_up_to":135,"requires_at_least":96,"requires_php":97,"tags":136,"homepage":97,"download_link":141,"security_score":83,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":26},"countrylock","CountryLock","1.0.8","topsyde","https:\u002F\u002Fprofiles.wordpress.org\u002Ftopsyde\u002F","\u003Cp>CountryLock provides a simple, lightweight way to allow or block countries from accessing your WordPress site.\u003C\u002Fp>\n\u003Cp>It’s designed to be \u003Cstrong>“set it and forget it”\u003C\u002Fstrong> with no upsells, ads, or complex configurations.\u003C\u002Fp>\n\u003Ch3>✨ Key Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>Master Toggle:\u003C\u002Fstrong> Enable or disable the firewall with a single click.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Allowed Countries List:\u003C\u002Fstrong> Specify which two-letter country codes (e.g., \u003Ccode>US\u003C\u002Fcode>, \u003Ccode>CA\u003C\u002Fcode>) are allowed. Everyone else is blocked.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Admin Bypass:\u003C\u002Fstrong> Logged-in administrators can always bypass the block (toggleable).\u003C\u002Fli>\n\u003Cli>\u003Cstrong>IP Allowlist:\u003C\u002Fstrong> A simple list of IPs or CIDR ranges (like \u003Ccode>123.45.67.89\u003C\u002Fcode> or \u003Ccode>10.0.0.0\u002F8\u003C\u002Fcode>) that are always allowed.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Block Logging:\u003C\u002Fstrong> See which countries and IPs are being blocked (toggleable).\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Zero-Lookup Detection:\u003C\u002Fstrong> Automatically uses Cloudflare (\u003Ccode>HTTP_CF_IPCOUNTRY\u003C\u002Fcode>) and other common server-level GEO headers for instant decisions with zero performance impact.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Remote Lookup:\u003C\u002Fstrong> As a fallback, it can query an external service (\u003Ccode>ipapi.co\u003C\u002Fcode>) if no headers are found.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>External Services\u003C\u002Fh3>\n\u003Cp>This plugin uses one external service as a fallback to determine a visitor’s country if no local GEO headers (like those from Cloudflare or a server-level GeoIP module) are present.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Service:\u003C\u002Fstrong> \u003Ccode>ipapi.co\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>What it’s used for:\u003C\u002Fstrong> To look up the country of origin for a visitor’s IP address.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Data Sent:\u003C\u002Fstrong> The visitor’s IP address is sent to the service. This happens \u003Cem>only\u003C\u002Fem> if the “Use remote lookup if no geo headers” setting is enabled AND no local GeoIP headers are detected.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Service Policies:\u003C\u002Fstrong>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fipapi.co\u002Fterms\u002F\" rel=\"nofollow ugc\">Terms of Service\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fipapi.co\u002Fprivacy\u002F\" rel=\"nofollow ugc\">Privacy Policy\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003C\u002Ful>\n","Block\u002Fallow countries with one toggle. Lightweight, no upsells. Includes admin bypass, IP allowlist, and block stats.",345,"2025-11-17T14:19:00.000Z","6.8.5",[137,20,138,139,140],"block","country","geo","geoip","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcountrylock.1.0.8.zip",{"attackSurface":143,"codeSignals":187,"taintFlows":206,"riskAssessment":233,"analyzedAt":239},{"hooks":144,"ajaxHandlers":178,"restRoutes":184,"shortcodes":185,"cronEvents":186,"entryPointCount":123,"unprotectedCount":123},[145,152,157,161,166,170,174],{"type":146,"name":147,"callback":148,"priority":149,"file":150,"line":151},"action","template_redirect","rca_block_country",9999,"includes\u002Fblock-country.php",114,{"type":146,"name":153,"callback":154,"file":155,"line":156},"admin_menu","rca_block_country_admin_menu","includes\u002Fcustom-settings.php",31,{"type":146,"name":158,"callback":159,"file":155,"line":160},"admin_notices","rca_block_country_success_notice",62,{"type":146,"name":162,"callback":163,"priority":164,"file":155,"line":165},"admin_init","rca_submit_data",10,66,{"type":146,"name":167,"callback":168,"file":155,"line":169},"admin_enqueue_scripts","rca_block_country_custom_scripts_loader",112,{"type":146,"name":171,"callback":172,"file":155,"line":173},"add_meta_boxes","rca_post_settings",205,{"type":146,"name":175,"callback":176,"file":155,"line":177},"save_post","rca_save_postdata",269,[179],{"action":180,"nopriv":181,"callback":182,"hasNonce":181,"hasCapCheck":181,"file":155,"line":183},"rca_get_posts",false,"rca_get_posts_ajax_callback",306,[],[],[],{"dangerousFunctions":188,"sqlUsage":189,"outputEscaping":191,"fileOperations":13,"externalRequests":123,"nonceChecks":94,"capabilityChecks":13,"bundledLibraries":202},[],{"prepared":13,"raw":13,"locations":190},[],{"escaped":192,"rawEcho":30,"locations":193},27,[194,196,198,200],{"file":150,"line":33,"context":195},"raw output",{"file":150,"line":197,"context":195},105,{"file":155,"line":199,"context":195},119,{"file":155,"line":201,"context":195},303,[203],{"name":204,"version":25,"knownCves":205},"Select2",[],[207,225],{"entryPoint":208,"graph":209,"unsanitizedCount":123,"severity":224},"rca_block_country (includes\u002Fblock-country.php:18)",{"nodes":210,"edges":222},[211,216],{"id":212,"type":213,"label":214,"file":150,"line":215},"n0","source","$_SERVER",21,{"id":217,"type":218,"label":219,"file":150,"line":220,"wp_function":221},"n1","sink","wp_remote_get() [SSRF]",37,"wp_remote_get",[223],{"from":212,"to":217,"sanitized":181},"medium",{"entryPoint":226,"graph":227,"unsanitizedCount":123,"severity":224},"\u003Cblock-country> (includes\u002Fblock-country.php:0)",{"nodes":228,"edges":231},[229,230],{"id":212,"type":213,"label":214,"file":150,"line":215},{"id":217,"type":218,"label":219,"file":150,"line":220,"wp_function":221},[232],{"from":212,"to":217,"sanitized":181},{"summary":234,"deductions":235},"The \"restrict-country-access\" plugin version 1.1.0 exhibits a mixed security posture. On the positive side, it demonstrates good practices by using prepared statements for all SQL queries and achieving a high percentage of properly escaped output. It also correctly utilizes nonce checks in two instances, which is a positive sign for input validation.  However, a significant concern arises from the presence of one unprotected AJAX handler, representing a direct entry point for potential attacks that bypass authentication.  While there are no recorded vulnerabilities or critical taint flows, the unprotected AJAX handler presents a clear and immediate risk.  The plugin's history of zero known CVEs is encouraging, suggesting a generally stable codebase, but this should not overshadow the identified unprotected entry point. Overall, the plugin has strengths in its data handling but requires immediate attention to secure its AJAX endpoint.",[236],{"reason":237,"points":238},"Unprotected AJAX handler",8,"2026-04-16T11:14:27.871Z",{"wat":241,"direct":250},{"assetPaths":242,"generatorPatterns":245,"scriptPaths":246,"versionParams":247},[243,244],"\u002Fwp-content\u002Fplugins\u002Frestrict-country-access\u002Fbuild\u002Frestrict-country.css","\u002Fwp-content\u002Fplugins\u002Frestrict-country-access\u002Fbuild\u002Frestrict-country.js",[],[244],[248,249],"restrict-country-access\u002Fbuild\u002Frestrict-country.css?ver=","restrict-country-access\u002Fbuild\u002Frestrict-country.js?ver=",{"cssClasses":251,"htmlComments":254,"htmlAttributes":260,"restEndpoints":266,"jsGlobals":267,"shortcodeOutput":269},[252,253],"rca-restrict-country","rca_country",[255,256,257,258,259],"\u003C!-- listing all Contries in the select box function. -->","\u003C!-- Nonce Verification. -->","\u003C!-- Display Admin Notice. -->","\u003C!-- Outputs the content of the meta box. -->","\u003C!-- Checks save status. -->",[253,261,262,263,264,265],"rca_page_id","rca_nonce","rca_nonce_action","rca_selected_country","rca_post_setting_nonce",[],[268,159],"rca_countries_dropdown",[],{"error":271,"url":272,"statusCode":273,"statusMessage":274,"message":274},true,"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Frestrict-country-access\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":276,"versions":277},3,[278,283,290],{"version":6,"download_url":23,"svn_tag_url":279,"released_at":25,"has_diff":181,"diff_files_changed":280,"diff_lines":25,"trac_diff_url":281,"vulnerabilities":282,"is_current":271},"https:\u002F\u002Fplugins.svn.wordpress.org\u002Frestrict-country-access\u002Ftags\u002F1.1.0\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Frestrict-country-access%2Ftags%2F1.0.1&new_path=%2Frestrict-country-access%2Ftags%2F1.1.0",[],{"version":284,"download_url":285,"svn_tag_url":286,"released_at":25,"has_diff":181,"diff_files_changed":287,"diff_lines":25,"trac_diff_url":288,"vulnerabilities":289,"is_current":181},"1.0.1","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Frestrict-country-access.1.0.1.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Frestrict-country-access\u002Ftags\u002F1.0.1\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Frestrict-country-access%2Ftags%2F1.0.0&new_path=%2Frestrict-country-access%2Ftags%2F1.0.1",[],{"version":291,"download_url":292,"svn_tag_url":293,"released_at":25,"has_diff":181,"diff_files_changed":294,"diff_lines":25,"trac_diff_url":25,"vulnerabilities":295,"is_current":181},"1.0.0","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Frestrict-country-access.1.0.0.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Frestrict-country-access\u002Ftags\u002F1.0.0\u002F",[],[]]