Login Request a demo
GE
Product
GeoDirectory
by Paolo · last CVE Sep 3, 2026
10
CVEs
0
On KEV
9.3
Max CVSS
0
New 30D
Vulnerabilities10In the news0Timeline
Severity mix
Critical 3High 2Medium 5Low 0
Severity
All severities10Critical3High2Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add GeoDirectory to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-84813
9.3
0%
Sep 3
WordPress GeoDirectory plugin <= 2.8.174 - SQL Injection vulnerability
Affected: through 2.8.174
CVE-2026-54831
9.3
0%
Jun 26
WordPress GeoDirectory plugin <= 2.8.162 - SQL Injection vulnerability
Affected: through 2.8.162
CVE-2026-39512
9.3
0%
Jun 15
WordPress GeoDirectory plugin <= 2.8.152 - SQL Injection vulnerability
Affected: through 2.8.152
CVE-2026-81271
8.8
0%
Aug 27
WordPress GeoDirectory plugin <= 2.8.176 - Cross Site Request Forgery (CSRF) vulnerability
Affected: through 2.8.176
CVE-2026-66604
7.1
0%
Aug 20
WordPress GeoDirectory plugin <= 2.8.173 - Cross Site Scripting (XSS) vulnerability
Affected: through 2.8.173
CVE-2026-68565
6.5
0%
Aug 18
WordPress GeoDirectory plugin <= 2.8.172 - Cross Site Scripting (XSS) vulnerability
Affected: through 2.8.172
CVE-2026-42671
6.5
0%
Jun 1
WordPress GeoDirectory plugin <= 2.8.157 - Broken Access Control vulnerability
Affected: through 2.8.157
CVE-2026-57681
6.4
0%
Jul 2
WordPress GeoDirectory plugin <= 2.8.161 - Server Side Request Forgery (SSRF) vulnerability
Affected: through 2.8.161
CVE-2024-56259
5.4
0%
Jan 2
WordPress GeoDirectory plugin <= 2.3.84 - Cross Site Scripting (XSS) vulnerability
Affected: through 2.3.84
CVE-2026-24549
4.3
0%
Jan 23
WordPress GeoDirectory plugin <= 2.8.149 - Cross Site Request Forgery (CSRF) vulnerability
Affected: through 2.8.149
Showing 10