Vulnerabilities

TI-2026-58310 CVE-2026-84813 · GHSA-gwp5-8mcq-2w77

WordPress GeoDirectory plugin <= 2.8.174 - SQL Injection vulnerability

MEDIUM 46

Unauthenticated SQL Injection in GeoDirectory <= 2.8.174 versions.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.004 Published 2026-09-03 No fix listed CWE-89

TI-2026-56110 CVE-2026-81271 · GHSA-4p56-w3m5-jpjx

WordPress GeoDirectory plugin <= 2.8.176 - Cross Site Request Forgery (CSRF) vulnerability

LOW 39

Unauthenticated Cross Site Request Forgery (CSRF) in GeoDirectory <= 2.8.176 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00201 Published 2026-08-27 No fix listed CWE-352

TI-2026-47275 CVE-2026-66604 · GHSA-qxvh-2mjx-7wp3

WordPress GeoDirectory plugin <= 2.8.173 - Cross Site Scripting (XSS) vulnerability

LOW 31

Unauthenticated Cross Site Scripting (XSS) in GeoDirectory <= 2.8.173 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00251 Published 2026-08-20 No fix listed CWE-79

TI-2026-48312 CVE-2026-68565 · GHSA-86c6-9r5q-95h3

WordPress GeoDirectory plugin <= 2.8.172 - Cross Site Scripting (XSS) vulnerability

LOW 28

Contributor Cross Site Scripting (XSS) in GeoDirectory <= 2.8.172 versions.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00224 Published 2026-08-18 No fix listed CWE-79

TI-2026-41505 CVE-2026-57681 · GHSA-24p8-c5jg-969r

WordPress GeoDirectory plugin <= 2.8.161 - Server Side Request Forgery (SSRF) vulnerability

LOW 28

Subscriber Server Side Request Forgery (SSRF) in GeoDirectory <= 2.8.161 versions.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.0023 Published 2026-07-02 No fix listed CWE-918

TI-2026-39634 CVE-2026-54831 · GHSA-rprv-mwvc-g7cw

WordPress GeoDirectory plugin <= 2.8.162 - SQL Injection vulnerability

MEDIUM 46

Unauthenticated SQL Injection in GeoDirectory <= 2.8.162 versions.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.004 Published 2026-06-26 No fix listed CWE-89

TI-2026-28486 CVE-2026-39512 · GHSA-5cfj-2j7j-f96c

WordPress GeoDirectory plugin <= 2.8.152 - SQL Injection vulnerability

MEDIUM 46

Unauthenticated SQL Injection in GeoDirectory <= 2.8.152 versions.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00283 Published 2026-06-15 No fix listed CWE-89

TI-2026-30930 CVE-2026-42671 · GHSA-w25m-xp58-ggp4

WordPress GeoDirectory plugin <= 2.8.157 - Broken Access Control vulnerability

LOW 34

Missing Authorization vulnerability in Paolo GeoDirectory allows Exploiting Incorrectly Configured Access Control Security Levels.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00196 Published 2026-06-01 No fix listed CWE-862

TI-2026-19789 CVE-2026-24549 · GHSA-g43m-r7jr-63q9

WordPress GeoDirectory plugin <= 2.8.149 - Cross Site Request Forgery (CSRF) vulnerability

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in Paolo GeoDirectory geodirectory allows Cross Site Request Forgery.This issue affects GeoDirectory: from n/a through <= 2.8.149.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00151 Published 2026-01-23 No fix listed CWE-352

Vulnerabilities

Filters