CVE-2026-15260

The CVE-2026-15260 affects the GEO my WP WordPress plugin prior to 4.5.5.3. The vulnerability arises because two logged-in AJAX actions do not perform ownership or capability checks, enabling users with subscriber-level access or higher to modify or permanently delete geolocation records of other...