Lucene search
+L

7 matches found

Nuclei
Nuclei
•added 2026/10/04 2:38 a.m.•151 views

My Geo Posts Free <= 1.2 - PHP Object Injection

The My Geo Posts Free plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.2 via deserialization of untrusted input. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software. If ...

9.8CVSS8.1AI score0.03049EPSS
SaveExploits0References4
Kitploit
Kitploit
•added 2026/10/04 12:11 a.m.•14 views

CVE-2024-52433

CVE-2024-52433 My Geo Posts Free = 1.2 - 未认证的PHP对象注入 描述 WordPress 的 My Geo Posts Free 插件在版本 1.2 及以下版本中,由于对不可信输入进行反序列化,存在 PHP 对象注入漏洞。这使得未认证的攻击者能够注入一个 PHP 对象。受影响的软件中不存在已知的 POP 链。如果目标系统上安装了额外的插件或主题中存在 POP 链,则攻击者可能能够删除任意文件、获取敏感数据或执行代码。 下载链接:下载 my-geo-posts-free 版本 1.2 类型: plugin CVSS 评分: 9.8 CVSS 向量:...

9.8CVSS8.6AI score0.03049EPSS
SaveExploits0
CNNVD
CNNVD
•added 2025/11/11 12:00 a.m.•16 views

WordPress plugin My Geo Posts Free 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

6.4CVSS5.6AI score0.00219EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/11 12:00 a.m.•1 views

CVE-2025-11863: Improper Neutralization of Input During Web Page Generation

The My Geo Posts Free plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'mygeocity' shortcode in all versions up to, and including, 1.2. This is due to the plugin not properly sanitizing user input or escaping output of the 'default' shortcode attribute. This makes it...

6.4CVSS6AI score0.00219EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 12:17 p.m.•24 views

CVE-2024-52433

Deserialization of Untrusted Data vulnerability in Mindstien Technologies My Geo Posts Free my-geo-posts-free allows Object Injection.This issue affects My Geo Posts Free: from n/a through = 1.2...

9.8CVSS7.2AI score0.03049EPSS
SaveExploits0References1
NVD
NVD
•added 2024/11/18 3:15 p.m.•40 views

CVE-2024-52433

Deserialization of Untrusted Data vulnerability in Mindstien Technologies My Geo Posts Free my-geo-posts-free allows Object Injection.This issue affects My Geo Posts Free: from n/a through = 1.2...

9.8CVSS0.03049EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/18 12:00 a.m.•3 views

CVE-2024-52433: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in Mindstien Technologies My Geo Posts Free my-geo-posts-free allows Object Injection.This issue affects My Geo Posts Free: from n/a through = 1.2...

9.8CVSS5.8AI score0.03049EPSS
SaveExploits0References1
Rows per page
Query Builder