WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
geo-request
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
geo-targetly-geo-content
Published
2025-01-06
Title
Geo Content < 6.1 - Contributor+ Stored XSS
Slug
geocache-stat-bar-widget
Published
2024-11-14
Title
Geocache Stat Bar Widget <= 0.911 - Admin+ Stored XSS
Slug
geodatasource-country-region-dropdown
Published
2024-12-13
Title
GeoDataSource Country Region DropDown < 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
geodigs
Published
2025-01-16
Title
GeoDigs <= 3.4.1 - Reflected Cross-Site Scripting
Slug
geodir_location_manager
Published
2021-06-04
Title
GeoDirectory Location Manager < 2.1.0.10 - Multiple Unauthenticated SQL Injections
Slug
geodirectory
Published
2021-09-02
Title
GeoDirectory < 2.1.1.3 - Authenticated (admin+) Stored Cross-Site Scripting (XSS)
Slug
geodirectory
Published
2022-12-29
Title
GeoDirectory < 2.2.22 - Contributor+ Stored XSS via Shortcode
Slug
geodirectory
Published
2023-01-31
Title
GeoDirectory < 2.2.24 - Admin+ SQLi
Slug
geodirectory
Published
2023-10-18
Title
GeoDirectory < 2.3.29 - Authenticated (Administrator+) SQL Injection via orderby
Slug
geodirectory
Published
2023-12-21
Title
GeoDirectory < 2.3.29 - Authenticated(Administrator+) SQL Injection
Slug
geodirectory
Published
2024-04-22
Title
GeoDirectory – WordPress Business Directory Plugin, or Classified Directory < 2.3.49 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'gd_single_tabs' Shortcode
Slug
geodirectory
Published
2024-08-07
Title
GeoDirectory < 2.3.62 - Authenticated (Subscriber+) SQL Injection
Slug
geodirectory
Published
2024-08-28
Title
GeoDirectory < 2.3.71 - Missing Authorization via geodirectory_rated()
Slug
geodirectory
Published
2024-10-24
Title
GeoDirectory < 2.3.81 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
geodirectory
Published
2024-12-30
Title
GeoDirectory < 2.3.85 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
geodirectory
Published
2025-02-10
Title
GeoDirectory – WP Business Directory Plugin and Classified Listings Directory < 2.8.98 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Display_name Parameter
Slug
geodirectory
Published
2025-06-20
Title
GeoDirectory < 2.8.120 - Contributor+ Stored XSS
Slug
geodirectory
Published
2025-11-11
Title
GeoDirectory – WP Business Directory Plugin and Classified Listings Directory < 2.8.140 - Missing Authorization to Authenticated (Author+) Arbitrary Image Attachment
Slug
geodirectory
Published
2025-01-29
Title
GeoDirectory – WP Business Directory Plugin and Classified Listings Directory < 2.8.98 - Unauthenticated SQL Injection
Slug
geodirectory
Published
2026-01-23
Title
GeoDirectory < 2.8.150 - Cross-Site Request Forgery
Slug
geoflickr
Published
2024-12-11
Title
GeoFlickr < 1.4 - Reflected Cross-Site Scripting
Slug
geoip-detect
Published
2025-09-22
Title
Geolocation IP Detection < 5.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
geolocator
Published
2024-11-18
Title
Geolocator <= 1.1 - Unauthenticated PHP Object Injection
Slug
geoportail-shortcode
Published
2024-11-08
Title
Geoportail Shortcode <= 2.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting