Vulnerabilidades de Paolo

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Paolo: 5 registro(s), com severidade, exploração e correções.

Somente exploradas (KEV) →

CVE-2026-57681 Média · 6.4 CWE-918 02/07/2026

WordPress GeoDirectory plugin <= 2.8.161 - Server Side Request Forgery (SSRF) vulnerability

Subscriber Server Side Request Forgery (SSRF) in GeoDirectory <= 2.8.161 versions.

CVE-2026-54831 Crítica · 9.3 CWE-89 26/06/2026

Injeção de SQL não autenticada no plugin WordPress GeoDirectory

SQL Injection não autenticada no GeoDirectory em versões <= 2.8.162.

CVE-2026-39512 Crítica · 9.3 CWE-89 15/06/2026

WordPress GeoDirectory plugin <= 2.8.152 - SQL Injection vulnerability

Unauthenticated SQL Injection in GeoDirectory <= 2.8.152 versions.

CVE-2026-42671 Média · 6.5 CWE-862 01/06/2026

WordPress GeoDirectory plugin <= 2.8.157 - Broken Access Control vulnerability

Missing Authorization vulnerability in Paolo GeoDirectory allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects GeoDirectory: from n/a through 2.8.157.

CVE-2026-24549 Média · 4.3 CWE-352 23/01/2026

WordPress GeoDirectory plugin <= 2.8.149 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery (CSRF) vulnerability in Paolo GeoDirectory geodirectory allows Cross Site Request Forgery.This issue affects GeoDirectory: from n/a through <= 2.8.149.