292 matches found
CVE-2026-66604 WordPress GeoDirectory plugin <= 2.8.173 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in GeoDirectory = 2.8.173 versions...
CVE-2026-66604 WordPress GeoDirectory plugin <= 2.8.173 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in GeoDirectory = 2.8.173 versions...
EUVD-2026-63343
Unauthenticated Cross Site Scripting XSS in GeoDirectory = 2.8.173 versions...
CVE-2026-66604
An unauthenticated reflected/stored XSS vulnerability exists in the GeoDirectory WordPress plugin (versions ≤ 2.8.173), allowing an attacker to inject malicious scripts into pages viewed by other users without authentication, enabling session hijacking or credential theft. No in-the-wild exploita...
PT-2026-78964
Unauthenticated Cross Site Scripting XSS in GeoDirectory = 2.8.173 versions...
CVE-2026-66604: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in GeoDirectory = 2.8.173 versions...
WordPress GeoDirectory plugin <= 2.8.173 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by dunvu0 in WordPress Plugin GeoDirectory versions = 2.8.173...
CVE-2026-68565
Contributor Cross Site Scripting XSS in GeoDirectory = 2.8.172 versions...
EUVD-2026-60934
Contributor Cross Site Scripting XSS in GeoDirectory = 2.8.172 versions...
CVE-2026-68565
Contributor-level XSS in the WordPress GeoDirectory plugin affects versions up to 2.8.172 (CVE description) or 2.8.174 (Patchstack report), exploitable by authenticated users with contributor privileges to inject scripts affecting other users. No patch version or in-the-wild exploitation details ...
CVE-2026-68565 WordPress GeoDirectory plugin <= 2.8.172 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in GeoDirectory = 2.8.172 versions...
CVE-2026-68565 WordPress GeoDirectory plugin <= 2.8.172 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in GeoDirectory = 2.8.172 versions...
CVE-2026-68565
Contributor Cross Site Scripting XSS in GeoDirectory = 2.8.172 versions...
WordPress GeoDirectory plugin < 2.8.110 - Editor+ Stored XSS via Place Categories vulnerability
Editor+ Stored XSS via Place Categories vulnerability discovered by Krugov Artyom in WordPress Plugin GeoDirectory versions 2.8.110...
WordPress GeoDirectory plugin <= 2.8.177 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin GeoDirectory versions = 2.8.177...
CVE-2026-68565: Improper Neutralization of Input During Web Page Generation
Contributor Cross Site Scripting XSS in GeoDirectory = 2.8.172 versions...
PT-2026-77077
Contributor Cross Site Scripting XSS in GeoDirectory = 2.8.172 versions...
CVE-2026-19091
The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the deleterevision function in all versions up to, and including, 2.8.169. This makes it possible for...
EUVD-2026-56929
The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the deleterevision function in all versions up to, and including, 2.8.169. This makes it possible for...