Plugin icon

Geo Controller

cf-geoplugin

Vulnerabilities:

7

Last Updated:

July 2, 2026

Active Installs:

1000

Published
Title
Fixed in
CVSS
Published
2025-12-08
Title
Geo Controller < 8.9.6 - Unauthenticated Information Exposure
Fixed in
Fixed in 8.9.6
CVSS
5.3 (medium)
Published
2024-09-04
Title
Geo Controller < 8.7.4 - Missing Authorization to Authenticated (Subscriber+) Menu Creation/Deletion
Fixed in
Fixed in 8.7.4
CVSS
4.3 (medium)
Published
2024-09-04
Title
Geo Controller < 8.7.0 - Missing Authorization to Unauthenticated Shortcode Execution
Fixed in
Fixed in 8.7.0
CVSS
5.3 (medium)
Published
2024-04-10
Title
WordPress Geo Controller < 8.6.5 - PHP Object Injection
Fixed in
Fixed in 8.6.5
CVSS
9.0 (critical)
Published
2024-03-28
Title
Geo Controller < 8.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 8.6.5
CVSS
6.4 (medium)
Published
2023-10-04
Title
Geo Controller < 8.5.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Fixed in
Fixed in 8.5.3
CVSS
4.4 (medium)
Published
2021-08-31
Title
CF Geo Plugin < 7.13.12 - Reflected Cross-Site Scripting
Fixed in
Fixed in 7.13.12
CVSS
8.8 (high)