Login Request a demo
PA
Vendor
paoltaia
1 product with CVEs on record
13
CVEs
0
On KEV
7
New 30D
Products
GW
GeoDirectory – WP Business Directory Plugin and Classified Listings Directory
paoltaia
8.1
13 CVEs0 on KEV7 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-110703
GW
GeoDirectory – WP Business Directory Plugin and Classified Listings Directory
paoltaia
6.4
0%
Oct 16GeoDirectory <= 2.8.191 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'post_content' Parameter via data-embed-url Attribute
CVE-2026-111069
GW
GeoDirectory – WP Business Directory Plugin and Classified Listings Directory
paoltaia
6.4
0%
Oct 16GeoDirectory <= 2.8.192 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'twitterusername' Custom Field
CVE-2026-107650
GW
GeoDirectory – WP Business Directory Plugin and Classified Listings Directory
paoltaia
6.4
0%
Oct 14GeoDirectory <= 2.8.190 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Dynamic Content Field-Token Substitution via Listing Title
CVE-2026-107754
GW
GeoDirectory – WP Business Directory Plugin and Classified Listings Directory
paoltaia
6.4
0%
Oct 14GeoDirectory <= 2.8.190 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Image Title
CVE-2026-104899
GW
GeoDirectory – WP Business Directory Plugin and Classified Listings Directory
paoltaia
8.1
1%
Oct 10GeoDirectory <= 2.8.187 - Unauthenticated Local File Inclusion via 'design_type' Parameter
CVE-2026-104993
GW
GeoDirectory – WP Business Directory Plugin and Classified Listings Directory
paoltaia
6.4
0%
Oct 10GeoDirectory <= 2.8.188 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Contact Email Custom Field
CVE-2026-103913
GW
GeoDirectory – WP Business Directory Plugin and Classified Listings Directory
paoltaia
7.5
0%
Oct 3GeoDirectory <= 2.8.186 - Unauthenticated SQL Injection via 'latitude' Parameter via Stored Pending Listing
CVE-2026-96766
GW
GeoDirectory – WP Business Directory Plugin and Classified Listings Directory
paoltaia
6.4
0%
Sep 25GeoDirectory <= 2.8.183 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'business_hours' Parameter
CVE-2026-93897
GW
GeoDirectory – WP Business Directory Plugin and Classified Listings Directory
paoltaia
6.4
0%
Sep 25GeoDirectory <= 2.8.181 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Text-type Custom Field (e.g., 'phone')
CVE-2026-19091
GW
GeoDirectory – WP Business Directory Plugin and Classified Listings Directory
paoltaia
8.1
1%
Aug 11GeoDirectory <= 2.8.169 - Authenticated (Subscriber+) Arbitrary File Deletion via 'post_type' Parameter via Query-String Bypass in geodir_save_post + geodir_delete_revision
CVE-2025-12833
GW
GeoDirectory – WP Business Directory Plugin and Classified Listings Directory
paoltaia
4.3
0%
Nov 12GeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.139 - Missing Authorization to Authenticated (Author+) Arbitrary Image Attachment
CVE-2024-13507
GW
GeoDirectory – WP Business Directory Plugin and Classified Listings Directory
paoltaia
7.5
1%
Jul 26GeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.97 - Unauthenticated SQL Injection
CVE-2024-13506
GW
GeoDirectory – WP Business Directory Plugin and Classified Listings Directory
paoltaia
6.4
0%
Feb 11GeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.97 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Display_name Parameter