mindstien

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

mindstien records in CISA KEV

No mindstien vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

My Geo Posts Free 1 record MEDIUM

Records

2 records

TI-2024-35104 CVE-2024-52433 · GHSA-95mq-85gw-2hf3

WordPress My Geo Posts Free plugin <= 1.2 - PHP Object Injection vulnerability

MEDIUM 54

Deserialization of Untrusted Data vulnerability in Mindstien Technologies My Geo Posts Free my-geo-posts-free allows Object Injection.This issue affects My Geo Posts Free: from n/a through <= 1.2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03075 Published 2024-11-18 No fix listed CWE-502

TI-2025-10875 CVE-2025-11863 · GHSA-87wf-p2p2-hcq3

My Geo Posts Free <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

LOW 28

The My Geo Posts Free plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'mygeo_city' shortcode in all versions up to, and including, 1.2.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00235 Published 2025-11-11 No fix listed CWE-79

Open these records in search →

Critical	1
High	0
Medium	1
Low	0
No CVSS	0