Lucene search
+L

8 matches found

Kitploit
Kitploit
•added 2026/10/26 4:10 p.m.•27 views

CVE-2024-52433

CVE-2024-52433 My Geo Posts Free = 1.2 - Unauthenticated PHP Object Injection Description The My Geo Posts Free plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.2 via deserialization of untrusted input. This makes it possible for unauthenticated...

9.8CVSS8.9AI score0.03075EPSS
SaveExploits1
Nuclei
Nuclei
•added 2026/10/26 2:10 a.m.•160 views

My Geo Posts Free <= 1.2 - PHP Object Injection

The My Geo Posts Free plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.2 via deserialization of untrusted input. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software. If ...

9.8CVSS8.6AI score0.03075EPSS
SaveExploits1References4
KittySploit
KittySploit
•added 2026/07/28 11:27 a.m.•8 views

My Geo Posts Free <= 1.2 - PHP Object Injection Detection

The My Geo Posts Free plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.2 via deserialization of untrusted input. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software. If ...

9.8CVSS8.6AI score0.03075EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/11/11 12:00 a.m.•18 views

WordPress plugin My Geo Posts Free has a cross-site scripting vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

6.4CVSS5.5AI score0.00235EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/11 12:00 a.m.•6 views

CVE-2025-11863: Improper Neutralization of Input During Web Page Generation

The My Geo Posts Free plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'mygeocity' shortcode in all versions up to, and including, 1.2. This is due to the plugin not properly sanitizing user input or escaping output of the 'default' shortcode attribute. This makes it...

6.4CVSS6.1AI score0.00235EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/02/05 12:17 p.m.•27 views

CVE-2024-52433

Deserialization of Untrusted Data vulnerability in Mindstien Technologies My Geo Posts Free my-geo-posts-free allows Object Injection.This issue affects My Geo Posts Free: from n/a through = 1.2...

9.8CVSS8.5AI score0.03075EPSS
SaveExploits1References1
NVD
NVD
•added 2024/11/18 3:15 p.m.•45 views

CVE-2024-52433

Deserialization of Untrusted Data vulnerability in Mindstien Technologies My Geo Posts Free my-geo-posts-free allows Object Injection.This issue affects My Geo Posts Free: from n/a through = 1.2...

9.8CVSS0.03075EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/18 12:00 a.m.•11 views

CVE-2024-52433: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in Mindstien Technologies My Geo Posts Free my-geo-posts-free allows Object Injection.This issue affects My Geo Posts Free: from n/a through = 1.2...

9.8CVSS8.5AI score0.03075EPSS
SaveExploits1References1
Rows per page
Query Builder