292 matches found
CVE-2026-84813
Unauthenticated SQL Injection in GeoDirectory = 2.8.174 versions...
CVE-2026-84813 WordPress GeoDirectory plugin <= 2.8.174 - SQL Injection vulnerability
Unauthenticated SQL Injection in GeoDirectory = 2.8.174 versions...
EUVD-2026-70569
Unauthenticated SQL Injection in GeoDirectory = 2.8.174 versions...
CVE-2026-84813 WordPress GeoDirectory plugin <= 2.8.174 - SQL Injection vulnerability
Unauthenticated SQL Injection in GeoDirectory = 2.8.174 versions...
CVE-2026-84813
The WordPress GeoDirectory plugin, in versions
CVE-2026-84813: Improper Neutralization of Special Elements used in an SQL Command
Unauthenticated SQL Injection in GeoDirectory = 2.8.174 versions...
PT-2026-85117
Unauthenticated SQL Injection in GeoDirectory = 2.8.174 versions...
WordPress GeoDirectory plugin <= 2.8.174 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Tawatchai Pinsuwan in WordPress Plugin GeoDirectory versions = 2.8.174...
VulnCheck KEV: CVE-2026-84813
Unauthenticated SQL Injection in GeoDirectory = 2.8.174 versions...
WordPress GeoDirectory plugin < 2.8.169 - Unauthenticated Pending/Draft Listing Disclosure via markers REST Endpoint vulnerability
Unauthenticated Pending/Draft Listing Disclosure via markers REST Endpoint vulnerability discovered by Usama Arshad in WordPress Plugin GeoDirectory versions 2.8.169...
CVE-2026-81271
Unauthenticated Cross Site Request Forgery CSRF in GeoDirectory = 2.8.176 versions...
EUVD-2026-66949
Unauthenticated Cross Site Request Forgery CSRF in GeoDirectory = 2.8.176 versions...
CVE-2026-81271 WordPress GeoDirectory plugin <= 2.8.176 - Cross Site Request Forgery (CSRF) vulnerability
Unauthenticated Cross Site Request Forgery CSRF in GeoDirectory = 2.8.176 versions...
CVE-2026-81271
An unauthenticated Cross-Site Request Forgery (CSRF) vulnerability affects the WordPress GeoDirectory plugin in versions 2.8.176 and earlier . The flaw was discovered by Brian Willows and carries a CVSS 3.1 score of 8.8 (HIGH) , with network attack vector, low complexity, no privileges required, ...
CVE-2026-81271 WordPress GeoDirectory plugin <= 2.8.176 - Cross Site Request Forgery (CSRF) vulnerability
Unauthenticated Cross Site Request Forgery CSRF in GeoDirectory = 2.8.176 versions...
WordPress GeoDirectory plugin < 2.8.168 - Contributor+ User Email Disclosure via geodir_json_search_users vulnerability
Contributor+ User Email Disclosure via geodirjsonsearchusers vulnerability discovered by Vaibhav Narkhede in WordPress Plugin GeoDirectory versions 2.8.168...
CVE-2026-81271: Cross-Site Request Forgery (CSRF)
Unauthenticated Cross Site Request Forgery CSRF in GeoDirectory = 2.8.176 versions...
PT-2026-82468
Unauthenticated Cross Site Request Forgery CSRF in GeoDirectory = 2.8.176 versions...
WordPress GeoDirectory plugin <= 2.8.176 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Brian Willows in WordPress Plugin GeoDirectory versions = 2.8.176...