TI-2026-58310 CVE-2026-84813 · GHSA-gwp5-8mcq-2w77
WordPress GeoDirectory plugin <= 2.8.174 - SQL Injection vulnerability
Priority MEDIUM 46
Unauthenticated SQL Injection in GeoDirectory <= 2.8.174 versions.
Paolo
Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
Paolo records in CISA KEVNo Paolo vulnerabilities are listed in CISA KEV.
Records
9 records
TI-2026-39634 CVE-2026-54831 · GHSA-rprv-mwvc-g7cw
WordPress GeoDirectory plugin <= 2.8.162 - SQL Injection vulnerability
Priority MEDIUM 46
Unauthenticated SQL Injection in GeoDirectory <= 2.8.162 versions.
TI-2026-28486 CVE-2026-39512 · GHSA-5cfj-2j7j-f96c
WordPress GeoDirectory plugin <= 2.8.152 - SQL Injection vulnerability
Priority MEDIUM 46
Unauthenticated SQL Injection in GeoDirectory <= 2.8.152 versions.
TI-2026-56110 CVE-2026-81271 · GHSA-4p56-w3m5-jpjx
WordPress GeoDirectory plugin <= 2.8.176 - Cross Site Request Forgery (CSRF) vulnerability
Priority LOW 39
Unauthenticated Cross Site Request Forgery (CSRF) in GeoDirectory <= 2.8.176 versions.
TI-2026-30930 CVE-2026-42671 · GHSA-w25m-xp58-ggp4
WordPress GeoDirectory plugin <= 2.8.157 - Broken Access Control vulnerability
Priority LOW 34
Missing Authorization vulnerability in Paolo GeoDirectory allows Exploiting Incorrectly Configured Access Control Security Levels.
TI-2026-47275 CVE-2026-66604 · GHSA-qxvh-2mjx-7wp3
WordPress GeoDirectory plugin <= 2.8.173 - Cross Site Scripting (XSS) vulnerability
Priority LOW 31
Unauthenticated Cross Site Scripting (XSS) in GeoDirectory <= 2.8.173 versions.
TI-2026-48312 CVE-2026-68565 · GHSA-86c6-9r5q-95h3
WordPress GeoDirectory plugin <= 2.8.172 - Cross Site Scripting (XSS) vulnerability
Priority LOW 28
Contributor Cross Site Scripting (XSS) in GeoDirectory <= 2.8.172 versions.
TI-2026-41505 CVE-2026-57681 · GHSA-24p8-c5jg-969r
WordPress GeoDirectory plugin <= 2.8.161 - Server Side Request Forgery (SSRF) vulnerability
Priority LOW 28
Subscriber Server Side Request Forgery (SSRF) in GeoDirectory <= 2.8.161 versions.
TI-2026-19789 CVE-2026-24549 · GHSA-g43m-r7jr-63q9
WordPress GeoDirectory plugin <= 2.8.149 - Cross Site Request Forgery (CSRF) vulnerability
Priority LOW 19
Cross-Site Request Forgery (CSRF) vulnerability in Paolo GeoDirectory geodirectory allows Cross Site Request Forgery.This issue affects GeoDirectory: from n/a through <= 2.8.149.