CVE Intelligence

Paolo GeoDirectory vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Paolo GeoDirectory: 9 record(s), with affected versions and fixes.

CVE-2026-84813 Critical · 9.3 CWE-89 Sep 3, 2026
WordPress GeoDirectory plugin <= 2.8.174 - SQL Injection vulnerability
Unauthenticated SQL Injection in GeoDirectory <= 2.8.174 versions.
CVE-2026-81271 High · 8.8 CWE-352 Aug 27, 2026
WordPress GeoDirectory plugin <= 2.8.176 - Cross Site Request Forgery (CSRF) vulnerability
Unauthenticated Cross Site Request Forgery (CSRF) in GeoDirectory <= 2.8.176 versions.
CVE-2026-66604 High · 7.1 CWE-79 Aug 20, 2026
WordPress GeoDirectory plugin <= 2.8.173 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in GeoDirectory <= 2.8.173 versions.
CVE-2026-68565 Medium · 6.5 CWE-79 Aug 18, 2026
WordPress GeoDirectory plugin <= 2.8.172 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting (XSS) in GeoDirectory <= 2.8.172 versions.
CVE-2026-57681 Medium · 6.4 CWE-918 Jul 2, 2026
WordPress GeoDirectory plugin <= 2.8.161 - Server Side Request Forgery (SSRF) vulnerability
Subscriber Server Side Request Forgery (SSRF) in GeoDirectory <= 2.8.161 versions.
CVE-2026-54831 Critical · 9.3 CWE-89 Jun 26, 2026
GeoDirectory WordPress Plugin Unauthenticated SQL Injection
Unauthenticated SQL Injection in GeoDirectory <= 2.8.162 versions.
CVE-2026-39512 Critical · 9.3 CWE-89 Jun 15, 2026
WordPress GeoDirectory plugin <= 2.8.152 - SQL Injection vulnerability
Unauthenticated SQL Injection in GeoDirectory <= 2.8.152 versions.
CVE-2026-42671 Medium · 6.5 CWE-862 Jun 1, 2026
WordPress GeoDirectory plugin <= 2.8.157 - Broken Access Control vulnerability
Missing Authorization vulnerability in Paolo GeoDirectory allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects GeoDirectory: from n/a through 2.8.157.
CVE-2026-24549 Medium · 4.3 CWE-352 Jan 23, 2026
WordPress GeoDirectory plugin <= 2.8.149 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery (CSRF) vulnerability in Paolo GeoDirectory geodirectory allows Cross Site Request Forgery.This issue affects GeoDirectory: from n/a through <= 2.8.149.