Plugin icon

GEO my WP

geo-my-wp

Vulnerabilities:

8

Last Updated:

May 29, 2026

Active Installs:

3000

Published
Title
Fixed in
CVSS
Published
2026-05-29
Title
GEO my WP < 4.5.5.1 - Unauthenticated SQL Injection via 'swlatlng' / 'nelatlng' Parameters
Fixed in
Fixed in 4.5.5.1
CVSS
7.5 (high)
Published
2024-12-11
Title
GEO my WordPress < 4.5.1 - Missing Authorization via get_field_options_ajax
Fixed in
Fixed in 4.5.1
CVSS
5.4 (medium)
Published
2024-10-31
Title
GEO My WordPress < 4.5 - Admin+ Arbitrary File Upload
Fixed in
Fixed in 4.5
CVSS
6.6 (medium)
Published
2024-09-25
Title
GEO my WordPress < 4.5.0.4 - Reflected Cross-Site Scripting
Fixed in
Fixed in 4.5.0.4
CVSS
6.1 (medium)
Published
2024-07-29
Title
GEO my WordPress < 4.5.0.2 - Unauthenticated LFI to RCE/PHAR Deserialization
Fixed in
Fixed in 4.5.0.2
CVSS
10.0 (critical)
Published
2024-04-11
Title
GEO my WordPress < 4.2 - Cross-Site Request Forgery
Fixed in
Fixed in 4.2
CVSS
4.3 (medium)
Published
2023-12-28
Title
GEO my WordPress < 4.0.3 - Authenticated(Administrator+) SQL Injection
Fixed in
Fixed in 4.0.3
CVSS
6.6 (medium)
Published
2023-10-09
Title
GEO my WordPress < 4.0.1 - Contributor+ Stored XSS
Fixed in
Fixed in 4.0.1
CVSS
5.9 (medium)