GeoDirectory vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

GE

Product

GeoDirectory

by · last CVE Oct 28, 2026

13

CVEs

0

On KEV

7.5

Max CVSS

10

New 30D

Vulnerabilities13 In the news0 Timeline

Severity mix

Critical 0High 2Medium 6Low 2

Severity

All severities13 Critical0 High2 Medium6 Low2

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add GeoDirectory to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-113493 New	6.8	0%	Oct 24	GeoDirectory < 2.8.194 - Contributor+ Stored XSS via gd_map Shortcode width Attribute Affected: before 2.8.194
CVE-2026-16968	6.5	0%	Aug 5	GeoDirectory < 2.8.168 - Contributor+ User Email Disclosure via geodir_json_search_users Affected: before 2.8.168
CVE-2026-113491 New	6.4	0%	Oct 24	GeoDirectory < 2.8.194 - Subscriber+ Media File Disclosure and Deletion via Path Traversal Affected: before 2.8.194
CVE-2026-113492 New	5.3	0%	Oct 24	GeoDirectory < 2.8.194 - Unauthenticated Non-Public Listing Disclosure via Recently Viewed Listings AJAX Action Affected: before 2.8.194
CVE-2026-113490 New	5.3	0%	Oct 24	GeoDirectory < 2.8.194 - Unauthenticated Non-Public Listing Disclosure via Marker Popup REST Endpoint Affected: before 2.8.194
CVE-2026-113489 New	4.3	0%	Oct 24	GeoDirectory < 2.8.194 - Subscriber+ Arbitrary Listing Image Modification via IDOR Affected: before 2.8.194