CVE-2026-14307

CVE-2026-14307 is a reflected cross-site scripting (XSS) vulnerability in the Geotargeting WP WordPress plugin, affecting versions before 3.5.6.2 . The root cause is the failure to sanitise or escape several parameters before reflecting them in AJAX responses that are served with an HTML content ...

PT-2026-83318

Name of the Vulnerable Software and Affected Versions geotargetingwp versions prior to 3.5.6.2 Description The plugin fails to sanitize or escape several parameters before reflecting them in AJAX responses served with an HTML content type. This allows unauthenticated attackers to perform reflecte...