CVE-2026-24549

Cross-Site Request Forgery CSRF vulnerability in Paolo GeoDirectory geodirectory allows Cross Site Request Forgery.This issue affects GeoDirectory: from n/a through = 2.8.149...

CVE-2026-24549

CVE-2026-24549 is a CSRF vulnerability in the WordPress GeoDirectory plugin. Affected software: GeoDirectory WordPress Plugin and Classified Listings Directory (GeoDirectory) with versions up to and including 2.8.149; the issue allows CSRF when authenticated users perform actions on behalf of an ...