Unknown Geodirectory vulnerabilities

• paolo geodirectory GeoDirectory < 2.8.197 - Unauthenticated Password-Protected Listing Content Disclosure CVE-2026-114270 5.3 MediumOctober 29, 2026
• paolo geodirectory GeoDirectory < 2.8.195 - Contributor+ Non-Public Listing Disclosure via gd_post_content Shortcode CVE-2026-113494 2.7 LowOctober 28, 2026
• paolo geodirectory GeoDirectory < 2.8.196 - Contributor+ Stored XSS via gd_post_badge 'cta' Attribute CVE-2026-113488 6.8 MediumOctober 28, 2026
• paolo geodirectory GeoDirectory < 2.8.196 - Contributor+ Stored XSS via gd_post_badge 'link' Attribute CVE-2026-113487 6.8 MediumOctober 28, 2026
• paolo geodirectory GeoDirectory < 2.8.194 - Unauthenticated Guest-Submitted Listing Modification CVE-2026-113674 3.7 LowOctober 24, 2026
• paolo geodirectory GeoDirectory < 2.8.194 - Admin+ RCE via DB Text Export CVE-2026-113673 7.2 HighOctober 24, 2026
• paolo geodirectory GeoDirectory < 2.8.194 - Contributor+ Stored XSS via gd_map Shortcode width Attribute CVE-2026-113493 6.8 MediumOctober 24, 2026
• paolo geodirectory GeoDirectory < 2.8.194 - Unauthenticated Non-Public Listing Disclosure via Recently Viewed Listings AJAX Action CVE-2026-113492 5.3 MediumOctober 24, 2026
• paolo geodirectory GeoDirectory < 2.8.194 - Subscriber+ Media File Disclosure and Deletion via Path Traversal CVE-2026-113491 6.4 MediumOctober 24, 2026
• paolo geodirectory GeoDirectory < 2.8.194 - Unauthenticated Non-Public Listing Disclosure via Marker Popup REST Endpoint CVE-2026-113490 5.3 MediumOctober 24, 2026
• paolo geodirectory GeoDirectory < 2.8.194 - Subscriber+ Arbitrary Listing Image Modification via IDOR CVE-2026-113489 4.3 MediumOctober 24, 2026
• paolo geodirectory GeoDirectory < 2.8.169 - Unauthenticated Pending/Draft Listing Disclosure via markers REST Endpoint CVE-2026-16988 7.5 HighAugust 9, 2026
• paolo geodirectory GeoDirectory < 2.8.110 - Editor+ Stored XSS via Place Categories CVE-2025-15677 3.5 LowAugust 5, 2026
• paolo geodirectory GeoDirectory < 2.8.168 - Contributor+ User Email Disclosure via geodir_json_search_users CVE-2026-16968 6.5 MediumAugust 5, 2026
• ayecode geodirectory GeoDirectory < 2.8.120 - Contributor+ Stored XSS CVE-2025-6200 5.9 MediumJuly 11, 2025
• paolo geodirectory GeoDirectory < 2.2.24 - Admin+ SQLi CVE-2023-0278 7.2 HighFebruary 27, 2023
• ayecode geodirectory GeoDirectory < 2.2.22 - Contributor+ Stored XSS via Shortcode CVE-2022-4775 5.4 MediumJanuary 23, 2023
• ayecode geodirectory, unknown business directory plugin | geodirectory +1 more GeoDirectory < 2.1.1.3 - Authenticated Stored Cross-Site Scripting (XSS) CVE-2021-24720 5.4 MediumOctober 11, 2021