TI-2025-03643 CVE-2025-4103 · GHSA-3mfv-w34c-w847Improper authorization in luminfire WP-GeoMetaPriority MEDIUM 40The WP-GeoMeta plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the wp_ajax_wpgm_start_geojson_import() function in versions 0.3.4 to 0.3.5.CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00436 · Published 2025-05-31 · No fix listed CWE-285