Login Request a demo
GE
Product
Geodirectory
by Ayecode · last CVE Jul 11, 2025
9
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 0High 3Medium 6Low 0
Severity
All severities9Critical0High3Medium6Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Geodirectory to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-43981
8.8
0%
Nov 1
Missing Authorization vulnerability in AyeCode – WP Business Directory Plugins GeoDirectory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…
Affected: before 2.3.71
CVE-2024-43145
8.8
0%
Aug 18
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AyeCode Ltd GeoDirectory.This issue affects GeoDirectory: from n/a through…
Affected: before 2.3.62
CVE-2023-50845
7.2
1%
Dec 28
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AyeCode - WordPress Business Directory Plugins GeoDirectory – WordPress…
Affected: through 2.3.28
CVE-2025-6200
5.9
0%
Jul 11
GeoDirectory < 2.8.120 - Contributor+ Stored XSS
Affected: before 2.8.120
CVE-2024-56259
5.4
0%
Jan 2
WordPress GeoDirectory plugin <= 2.3.84 - Cross Site Scripting (XSS) vulnerability
Affected: before 2.3.85
CVE-2024-50437
5.4
0%
Oct 28
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Paolo GeoDirectory geodirectory allows Stored XSS.This issue affects…
Affected: before 2.3.81
CVE-2024-3732
5.4
0%
Apr 23
The GeoDirectory – WordPress Business Directory Plugin, or Classified Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'gd_single_tabs'…
Affected: before 2.3.49
CVE-2022-4775
5.4
0%
Jan 23
The GeoDirectory WordPress plugin before 2.2.22 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with…
Affected: before 2.2.22
CVE-2021-24720
5.4
1%
Oct 11
The GeoDirectory Business Directory WordPress plugin before 2.1.1.3 was vulnerable to Authenticated Stored Cross-Site Scripting (XSS)
Affected: before 2.1.1.3
Showing 9