WordPress Plugin Vulnerabilities | Page 14 | WPScan

0-9
a
b
c
d
e
f
g
h
i
j
k
l
m
n
o
p
q
r
s
t
u
v
w
x
y
z

Slug

Published

2022-12-29

Title

GeoDirectory < 2.2.22 - Contributor+ Stored XSS via Shortcode

Slug

Published

2023-01-31

Title

GeoDirectory < 2.2.24 - Admin+ SQLi

Slug

Published

2023-10-18

Title

GeoDirectory < 2.3.29 - Authenticated (Administrator+) SQL Injection via orderby

Slug

Published

2023-12-21

Title

GeoDirectory < 2.3.29 - Authenticated(Administrator+) SQL Injection

Slug

Published

2024-04-22

Title

GeoDirectory – WordPress Business Directory Plugin, or Classified Directory < 2.3.49 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'gd_single_tabs' Shortcode

Slug

Published

2024-08-07

Title

GeoDirectory < 2.3.62 - Authenticated (Subscriber+) SQL Injection

Slug

Published

2024-08-28

Title

GeoDirectory < 2.3.71 - Missing Authorization via geodirectory_rated()

Slug

Published

2024-10-24

Title

GeoDirectory < 2.3.81 - Authenticated (Contributor+) Stored Cross-Site Scripting

Slug

Published

2024-12-30

Title

GeoDirectory < 2.3.85 - Authenticated (Contributor+) Stored Cross-Site Scripting

Slug

Published

2025-02-10

Title

GeoDirectory – WP Business Directory Plugin and Classified Listings Directory < 2.8.98 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Display_name Parameter

Slug

Published

2025-06-20

Title

GeoDirectory < 2.8.120 - Contributor+ Stored XSS

Slug

Published

2025-11-11

Title

GeoDirectory – WP Business Directory Plugin and Classified Listings Directory < 2.8.140 - Missing Authorization to Authenticated (Author+) Arbitrary Image Attachment

Slug

Published

2025-01-29

Title

GeoDirectory – WP Business Directory Plugin and Classified Listings Directory < 2.8.98 - Unauthenticated SQL Injection

Slug

Published

2026-01-23

Title

GeoDirectory < 2.8.150 - Cross-Site Request Forgery

Slug

Published

2026-04-13

Title

GeoDirectory – WP Business Directory Plugin and Classified Listings Directory < 2.8.154 - Unauthenticated SQL Injection

Slug

Published

2026-05-13

Title

GeoDirectory – WP Business Directory Plugin and Classified Listings Directory < 2.8.158 - Missing Authorization

Slug

Published

2026-06-17

Title

GeoDirectory – WP Business Directory Plugin and Classified Listings Directory < 2.8.163 - Unauthenticated SQL Injection

Slug

Published

2026-06-30

Title

GeoDirectory – WP Business Directory Plugin and Classified Listings Directory < 2.8.162 - Authenticated (Subscriber+) Server-Side Request Forgery

Slug

Published

2026-07-27

Title

GeoDirectory < 2.8.168 - Contributor+ User Email Disclosure via geodir_json_search_users

Slug

Published

2026-07-28

Title

GeoDirectory < 2.8.110 - Editor+ Stored XSS via Place Categories

Slug

Published

2026-08-03

Title

GeoDirectory < 2.8.169 - Unauthenticated Pending/Draft Listing Disclosure via markers REST Endpoint

Slug

Published

2026-08-11

Title

GeoDirectory < 2.8.170 - Authenticated (Subscriber+) Arbitrary File Deletion via 'post_type' Parameter via Query-String Bypass in geodir_save_post + geodir_delete_revision

Slug

Published

2026-08-19

Title

GeoDirectory – WP Business Directory Plugin and Classified Listings Directory < 2.8.174 - Unauthenticated Stored Cross-Site Scripting

Slug

Published

2026-08-18

Title

GeoDirectory – WP Business Directory Plugin and Classified Listings Directory < 2.8.178 - Authenticated (Contributor+) Stored Cross-Site Scripting

Slug

Published

2026-08-26

Title

GeoDirectory – WP Business Directory Plugin and Classified Listings Directory < 2.8.177 - Cross-Site Request Forgery