Skip to content
Sign in
6.6 Medium

CVE-2024-9422 The GEO my WP WordPress plugin before 4.5, gmw-premium-settings WordPress plugin before 3.1 does not sufficiently…

Description

The GEO my WP WordPress plugin before 4.5, gmw-premium-settings WordPress plugin before 3.1 does not sufficiently validate files to be uploaded, which could allow attackers to upload arbitrary files such as PHP on the server.

Affected products and versions

Product Affected versions Fixed in
GEO my WP 4.0 4.0 → < 4.5 4.5
gmw-premium-settings 3.1 earliest → < 3.1 3.1
geo_my_wordpress 4.0 4.0 → < 4.5 4.5

Other CVEs of GEO my WP

The 3 CVEs of GEO my WP →
CVE-2026-15260 The GEO my WP WordPress plugin before 4.5.5.3 does not perform any ownership or capability check on two of its logged-in… 4.3 Medium CVE-2024-6330 The GEO my WP WordPress plugin before 4.5.0.2 does not prevent unauthenticated attackers from including arbitrary… 9.8 Critical
Track this CVE