WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
geodigs
Published
2025-01-16
Title
GeoDigs <= 3.4.1 - Reflected Cross-Site Scripting
Slug
geodir_location_manager
Published
2021-06-04
Title
GeoDirectory Location Manager < 2.1.0.10 - Multiple Unauthenticated SQL Injections
Slug
geodirectory
Published
2021-09-02
Title
GeoDirectory < 2.1.1.3 - Authenticated (admin+) Stored Cross-Site Scripting (XSS)
Slug
geodirectory
Published
2022-12-29
Title
GeoDirectory < 2.2.22 - Contributor+ Stored XSS via Shortcode
Slug
geodirectory
Published
2023-01-31
Title
GeoDirectory < 2.2.24 - Admin+ SQLi
Slug
geodirectory
Published
2023-10-18
Title
GeoDirectory < 2.3.29 - Authenticated (Administrator+) SQL Injection via orderby
Slug
geodirectory
Published
2023-12-21
Title
GeoDirectory < 2.3.29 - Authenticated(Administrator+) SQL Injection
Slug
geodirectory
Published
2024-04-22
Title
GeoDirectory – WordPress Business Directory Plugin, or Classified Directory < 2.3.49 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'gd_single_tabs' Shortcode
Slug
geodirectory
Published
2024-08-07
Title
GeoDirectory < 2.3.62 - Authenticated (Subscriber+) SQL Injection
Slug
geodirectory
Published
2024-08-28
Title
GeoDirectory < 2.3.71 - Missing Authorization via geodirectory_rated()
Slug
geodirectory
Published
2024-10-24
Title
GeoDirectory < 2.3.81 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
geodirectory
Published
2024-12-30
Title
GeoDirectory < 2.3.85 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
geodirectory
Published
2025-02-10
Title
GeoDirectory – WP Business Directory Plugin and Classified Listings Directory < 2.8.98 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Display_name Parameter
Slug
geodirectory
Published
2025-06-20
Title
GeoDirectory < 2.8.120 - Contributor+ Stored XSS
Slug
geodirectory
Published
2025-11-11
Title
GeoDirectory – WP Business Directory Plugin and Classified Listings Directory < 2.8.140 - Missing Authorization to Authenticated (Author+) Arbitrary Image Attachment
Slug
geodirectory
Published
2025-01-29
Title
GeoDirectory – WP Business Directory Plugin and Classified Listings Directory < 2.8.98 - Unauthenticated SQL Injection
Slug
geoflickr
Published
2024-12-11
Title
GeoFlickr < 1.4 - Reflected Cross-Site Scripting
Slug
geoip-detect
Published
2025-09-22
Title
Geolocation IP Detection < 5.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
geolocator
Published
2024-11-18
Title
Geolocator <= 1.1 - Unauthenticated PHP Object Injection
Slug
geoportail-shortcode
Published
2024-11-08
Title
Geoportail Shortcode <= 2.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
geoportail-shortcode
Published
2024-12-12
Title
Geoportail Shortcode <= 2.4.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
geopost
Published
2025-11-10
Title
Geopost <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
geotagged-media
Published
2024-11-04
Title
Geotagged Media <= 0.3.0 - Reflected Cross-Site Scripting
Slug
geotagged-media
Published
2025-01-16
Title
Geotagged Media <= 0.3.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
geounit-maps
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting