GE
Product
GeoDirectory
13
CVEs
0
On KEV
7.5
Max CVSS
10
New 30D
Severity mix
Critical 0High 2Medium 6Low 2
Watch
Add GeoDirectory to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-16988 | 7.5 | Aug 9 | GeoDirectory < 2.8.169 - Unauthenticated Pending/Draft Listing Disclosure via markers REST Endpoint Affected: before 2.8.169 |
| CVE-2026-113673 New | 7.2 | Oct 24 | GeoDirectory < 2.8.194 - Admin+ RCE via DB Text Export Affected: before 2.8.194 |
| CVE-2026-113493 New | 6.8 | Oct 24 | GeoDirectory < 2.8.194 - Contributor+ Stored XSS via gd_map Shortcode width Attribute Affected: before 2.8.194 |
| CVE-2026-16968 | 6.5 | Aug 5 | GeoDirectory < 2.8.168 - Contributor+ User Email Disclosure via geodir_json_search_users Affected: before 2.8.168 |
| CVE-2026-113491 New | 6.4 | Oct 24 | GeoDirectory < 2.8.194 - Subscriber+ Media File Disclosure and Deletion via Path Traversal Affected: before 2.8.194 |
| CVE-2026-113492 New | 5.3 | Oct 24 | GeoDirectory < 2.8.194 - Unauthenticated Non-Public Listing Disclosure via Recently Viewed Listings AJAX Action Affected: before 2.8.194 |
| CVE-2026-113490 New | 5.3 | Oct 24 | GeoDirectory < 2.8.194 - Unauthenticated Non-Public Listing Disclosure via Marker Popup REST Endpoint Affected: before 2.8.194 |
| CVE-2026-113489 New | 4.3 | Oct 24 | GeoDirectory < 2.8.194 - Subscriber+ Arbitrary Listing Image Modification via IDOR Affected: before 2.8.194 |
| CVE-2026-113674 New | 3.7 | Oct 24 | GeoDirectory < 2.8.194 - Unauthenticated Guest-Submitted Listing Modification Affected: before 2.8.194 |
| CVE-2025-15677 | 3.5 | Aug 5 | GeoDirectory < 2.8.110 - Editor+ Stored XSS via Place Categories Affected: before 2.8.110 |
| CVE-2026-113494 New | – | Oct 28 | GeoDirectory < 2.8.195 - Contributor+ Non-Public Listing Disclosure via gd_post_content Shortcode Affected: before 2.8.195 |
| CVE-2026-113488 New | – | Oct 28 | GeoDirectory < 2.8.196 - Contributor+ Stored XSS via gd_post_badge 'cta' Attribute Affected: before 2.8.196 |
| CVE-2026-113487 New | – | Oct 28 | GeoDirectory < 2.8.196 - Contributor+ Stored XSS via gd_post_badge 'link' Attribute Affected: before 2.8.196 |
Showing 13