Paolo vulnerabilities

Products

• Geodirectory 30

Newest

• paolo geodirectory GeoDirectory < 2.8.197 - Unauthenticated Password-Protected Listing Content Disclosure CVE-2026-114270 5.3 MediumOctober 29, 2026
• paolo geodirectory GeoDirectory < 2.8.195 - Contributor+ Non-Public Listing Disclosure via gd_post_content Shortcode CVE-2026-113494 2.7 LowOctober 28, 2026
• paolo geodirectory GeoDirectory < 2.8.196 - Contributor+ Stored XSS via gd_post_badge 'cta' Attribute CVE-2026-113488 6.8 MediumOctober 28, 2026
• paolo geodirectory GeoDirectory < 2.8.196 - Contributor+ Stored XSS via gd_post_badge 'link' Attribute CVE-2026-113487 6.8 MediumOctober 28, 2026
• paolo geodirectory GeoDirectory < 2.8.194 - Unauthenticated Guest-Submitted Listing Modification CVE-2026-113674 3.7 LowOctober 24, 2026
• paolo geodirectory GeoDirectory < 2.8.194 - Admin+ RCE via DB Text Export CVE-2026-113673 7.2 HighOctober 24, 2026
• paolo geodirectory GeoDirectory < 2.8.194 - Contributor+ Stored XSS via gd_map Shortcode width Attribute CVE-2026-113493 6.8 MediumOctober 24, 2026
• paolo geodirectory GeoDirectory < 2.8.194 - Unauthenticated Non-Public Listing Disclosure via Recently Viewed Listings AJAX Action CVE-2026-113492 5.3 MediumOctober 24, 2026
• paolo geodirectory GeoDirectory < 2.8.194 - Subscriber+ Media File Disclosure and Deletion via Path Traversal CVE-2026-113491 6.4 MediumOctober 24, 2026
• paolo geodirectory GeoDirectory < 2.8.194 - Unauthenticated Non-Public Listing Disclosure via Marker Popup REST Endpoint CVE-2026-113490 5.3 MediumOctober 24, 2026
• paolo geodirectory GeoDirectory < 2.8.194 - Subscriber+ Arbitrary Listing Image Modification via IDOR CVE-2026-113489 4.3 MediumOctober 24, 2026
• paolo geodirectory WordPress GeoDirectory plugin <= 2.8.174 - SQL Injection vulnerability CVE-2026-84813 9.3 CriticalSeptember 3, 2026
• paolo geodirectory WordPress GeoDirectory plugin <= 2.8.176 - Cross Site Request Forgery (CSRF) vulnerability CVE-2026-81271 8.8 HighAugust 27, 2026
• paolo geodirectory WordPress GeoDirectory plugin <= 2.8.173 - Cross Site Scripting (XSS) vulnerability CVE-2026-66604 7.1 HighAugust 20, 2026
• paolo geodirectory WordPress GeoDirectory plugin <= 2.8.172 - Cross Site Scripting (XSS) vulnerability CVE-2026-68565 6.5 MediumAugust 18, 2026
• paolo geodirectory GeoDirectory < 2.8.169 - Unauthenticated Pending/Draft Listing Disclosure via markers REST Endpoint CVE-2026-16988 7.5 HighAugust 9, 2026
• paolo geodirectory GeoDirectory < 2.8.110 - Editor+ Stored XSS via Place Categories CVE-2025-15677 3.5 LowAugust 5, 2026
• paolo geodirectory GeoDirectory < 2.8.168 - Contributor+ User Email Disclosure via geodir_json_search_users CVE-2026-16968 6.5 MediumAugust 5, 2026
• paolo geodirectory WordPress GeoDirectory plugin <= 2.8.161 - Server Side Request Forgery (SSRF) vulnerability CVE-2026-57681 6.4 MediumJuly 2, 2026
• paolo geodirectory WordPress GeoDirectory plugin <= 2.8.162 - SQL Injection vulnerability CVE-2026-54831 9.3 CriticalJune 26, 2026
• paolo geodirectory WordPress GeoDirectory plugin <= 2.8.152 - SQL Injection vulnerability CVE-2026-39512 9.3 CriticalJune 15, 2026
• paolo geodirectory WordPress GeoDirectory plugin <= 2.8.157 - Broken Access Control vulnerability CVE-2026-42671 6.5 MediumJune 1, 2026
• paolo geodirectory WordPress GeoDirectory plugin <= 2.8.149 - Cross Site Request Forgery (CSRF) vulnerability CVE-2026-24549 4.3 MediumJanuary 23, 2026
• ayecode geodirectory GeoDirectory < 2.8.120 - Contributor+ Stored XSS CVE-2025-6200 5.9 MediumJuly 11, 2025
• ayecode geodirectory WordPress GeoDirectory plugin <= 2.3.84 - Cross Site Scripting (XSS) vulnerability CVE-2024-56259 6.5 MediumJanuary 2, 2025
• ayecode geodirectory WordPress GeoDirectory plugin <= 2.3.70 - Broken Access Control vulnerability CVE-2024-43981 4.3 MediumNovember 1, 2024
• ayecode geodirectory WordPress GeoDirectory plugin <= 2.3.80 - Cross Site Scripting (XSS) vulnerability CVE-2024-50437 6.5 MediumOctober 28, 2024
• ayecode geodirectory WordPress GeoDirectory plugin <= 2.3.61 - SQL Injection vulnerability CVE-2024-43145 8.5 HighAugust 18, 2024
• paolo geodirectory GeoDirectory < 2.2.24 - Admin+ SQLi CVE-2023-0278 7.2 HighFebruary 27, 2023
• ayecode geodirectory GeoDirectory < 2.2.22 - Contributor+ Stored XSS via Shortcode CVE-2022-4775 5.4 MediumJanuary 23, 2023