Plugin icon

GEO my WP

geo-my-wp

Vulnerabilities:

12

Last Updated:

October 13, 2026

Active Installs:

3000

Published
Title
Fixed in
CVSS
Published
2026-09-11
Title
GEO my WP < 4.5.5.4 - Unauthenticated Local File Inclusion
Fixed in
Fixed in 4.5.5.4
CVSS
7.5 (high)
Published
2026-07-24
Title
Geo My WP < 4.5.5.3 - Subscriber+ Arbitrary Geolocation Record Modification and Deletion via IDOR
Fixed in
Fixed in 4.5.5.3
CVSS
4.3 (medium)
Published
2026-06-15
Title
GEO my WP < 4.5.5.1 - Unauthenticated SQL Injection
Fixed in
Fixed in 4.5.5.1
CVSS
7.5 (high)
Published
2026-05-29
Title
GEO my WP < 4.5.5.1 - Unauthenticated SQL Injection via 'swlatlng' / 'nelatlng' Parameters
Fixed in
Fixed in 4.5.5.1
CVSS
7.5 (high)
Published
2026-05-27
Title
GEO my WP < 4.5.5 - Unauthenticated SQL Injection via 'distance' / 'lat' / 'lng' Parameters
Fixed in
Fixed in 4.5.5
CVSS
9.1 (critical)
Published
2024-12-11
Title
GEO my WordPress < 4.5.1 - Missing Authorization via get_field_options_ajax
Fixed in
Fixed in 4.5.1
CVSS
5.4 (medium)
Published
2024-10-31
Title
GEO My WordPress < 4.5 - Admin+ Arbitrary File Upload
Fixed in
Fixed in 4.5
CVSS
6.6 (medium)
Published
2024-09-25
Title
GEO my WordPress < 4.5.0.4 - Reflected Cross-Site Scripting
Fixed in
Fixed in 4.5.0.4
CVSS
6.1 (medium)
Published
2024-07-29
Title
GEO my WordPress < 4.5.0.2 - Unauthenticated LFI to RCE/PHAR Deserialization
Fixed in
Fixed in 4.5.0.2
CVSS
10.0 (critical)
Published
2024-04-11
Title
GEO my WordPress < 4.2 - Cross-Site Request Forgery
Fixed in
Fixed in 4.2
CVSS
4.3 (medium)
Published
2023-12-28
Title
GEO my WordPress < 4.0.3 - Authenticated(Administrator+) SQL Injection
Fixed in
Fixed in 4.0.3
CVSS
6.6 (medium)
Published
2023-10-09
Title
GEO my WordPress < 4.0.1 - Contributor+ Stored XSS
Fixed in
Fixed in 4.0.1
CVSS
5.9 (medium)