222 matches found
CVE-2026-84813
Unauthenticated SQL Injection in GeoDirectory = 2.8.174 versions...
CVE-2026-84813 WordPress GeoDirectory plugin <= 2.8.174 - SQL Injection vulnerability
Unauthenticated SQL Injection in GeoDirectory = 2.8.174 versions...
EUVD-2026-70569
Unauthenticated SQL Injection in GeoDirectory = 2.8.174 versions...
CVE-2026-84813
An unauthenticated SQL Injection vulnerability affects the WordPress GeoDirectory plugin in versions
WordPress GeoDirectory plugin <= 2.8.174 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Tawatchai Pinsuwan in WordPress Plugin GeoDirectory versions = 2.8.174...
CVE-2026-81271
Unauthenticated Cross Site Request Forgery CSRF in GeoDirectory = 2.8.176 versions...
CVE-2026-81271 WordPress GeoDirectory plugin <= 2.8.176 - Cross Site Request Forgery (CSRF) vulnerability
Unauthenticated Cross Site Request Forgery CSRF in GeoDirectory = 2.8.176 versions...
EUVD-2026-66949
Unauthenticated Cross Site Request Forgery CSRF in GeoDirectory = 2.8.176 versions...
CVE-2026-81271
An unauthenticated Cross-Site Request Forgery (CSRF) vulnerability affects the WordPress GeoDirectory plugin in versions 2.8.176 and earlier . The flaw was discovered by Brian Willows and carries a CVSS 3.1 score of 8.8 (HIGH) , with network attack vector, low complexity, no privileges required, ...
WordPress GeoDirectory plugin < 2.8.168 - Contributor+ User Email Disclosure via geodir_json_search_users vulnerability
Contributor+ User Email Disclosure via geodirjsonsearchusers vulnerability discovered by Vaibhav Narkhede in WordPress Plugin GeoDirectory versions 2.8.168...
WordPress GeoDirectory plugin <= 2.8.176 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Brian Willows in WordPress Plugin GeoDirectory versions = 2.8.176...
CVE-2026-66604
Unauthenticated Cross Site Scripting XSS in GeoDirectory = 2.8.173 versions...
CVE-2026-66604 WordPress GeoDirectory plugin <= 2.8.173 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in GeoDirectory = 2.8.173 versions...
EUVD-2026-63343
Unauthenticated Cross Site Scripting XSS in GeoDirectory = 2.8.173 versions...
CVE-2026-66604
An unauthenticated reflected/stored XSS vulnerability exists in the GeoDirectory WordPress plugin (versions ≤ 2.8.173), allowing an attacker to inject malicious scripts into pages viewed by other users without authentication, enabling session hijacking or credential theft. No in-the-wild exploita...
CVE-2026-68565
Contributor Cross Site Scripting XSS in GeoDirectory = 2.8.172 versions...
EUVD-2026-60934
Contributor Cross Site Scripting XSS in GeoDirectory = 2.8.172 versions...
CVE-2026-68565
Contributor-level XSS in the WordPress GeoDirectory plugin affects versions up to 2.8.172 (CVE description) or 2.8.174 (Patchstack report), exploitable by authenticated users with contributor privileges to inject scripts affecting other users. No patch version or in-the-wild exploitation details ...
