Luminfire Wp-geometa vulnerabilities

• luminfire wp-geometa WP-GeoMeta 0.3.4 - 0.3.5 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via wp_ajax_wpgm_start_geojson_import Function CVE-2025-4103 8.8 HighMay 31, 2025