| CVE-2026-114270 |
The GeoDirectory WordPress plugin before 2.8.197 does not honour post password protection when rendering a listing,…
|
5.3
Moyenne
|
29 oct. 2026 |
| CVE-2026-113488 |
The GeoDirectory WordPress plugin before 2.8.196 does not properly escape a post badge shortcode attribute for a…
|
6.8
Moyenne
|
28 oct. 2026 |
| CVE-2026-113494 |
The GeoDirectory WordPress plugin before 2.8.195 does not perform any status or ownership check when rendering a…
|
2.7
Faible
|
28 oct. 2026 |
| CVE-2026-113487 |
The GeoDirectory WordPress plugin before 2.8.196 does not properly sanitise or escape a post badge click-through link…
|
6.8
Moyenne
|
28 oct. 2026 |
| CVE-2026-113674 |
The GeoDirectory WordPress plugin before 2.8.194 does not correctly verify ownership of listings submitted by…
|
3.7
Faible
|
24 oct. 2026 |
| CVE-2026-113490 |
The GeoDirectory WordPress plugin before 2.8.194 does not perform any status or ownership check when rendering a…
|
5.3
Moyenne
|
24 oct. 2026 |
| CVE-2026-113491 |
The GeoDirectory WordPress plugin before 2.8.194 does not validate a user-supplied image URL before using it as a local…
|
6.4
Moyenne
|
24 oct. 2026 |
| CVE-2026-113492 |
The GeoDirectory WordPress plugin before 2.8.194 does not perform status, ownership or password checks when loading…
|
5.3
Moyenne
|
24 oct. 2026 |
| CVE-2026-113493 |
The GeoDirectory WordPress plugin before 2.8.194 does not sanitise and escape some of its map shortcode attributes…
|
6.8
Moyenne
|
24 oct. 2026 |
| CVE-2026-113673 |
The GeoDirectory WordPress plugin before 2.8.194 does not properly escape administrator-defined text before writing…
|
7.2
Élevée
|
24 oct. 2026 |
| CVE-2026-113489 |
The GeoDirectory WordPress plugin before 2.8.194 does not verify that a referenced attachment belongs to the listing…
|
4.3
Moyenne
|
24 oct. 2026 |
| CVE-2026-16988 |
The GeoDirectory WordPress plugin before 2.8.169 does not perform any authorization check when returning map marker…
|
7.5
Élevée
|
9 août 2026 |
| CVE-2025-15677 |
The GeoDirectory WordPress plugin before 2.8.110 does not sanitise and escape a place-category setting before…
|
3.5
Faible
|
5 août 2026 |
| CVE-2026-16968 |
The GeoDirectory WordPress plugin before 2.8.168 does not restrict a user-search handler to users allowed to list…
|
6.5
Moyenne
|
5 août 2026 |
| CVE-2025-6200 |
The GeoDirectory WordPress plugin before 2.8.120 does not validate and escape some of its shortcode attributes before…
|
5.9
Moyenne
|
11 juil. 2025 |
| CVE-2023-0278 |
The GeoDirectory WordPress plugin before 2.2.24 does not properly sanitise and escape a parameter before using it in a…
|
7.2
Élevée
|
27 févr. 2023 |
| CVE-2022-4775 |
The GeoDirectory WordPress plugin before 2.2.22 does not validate and escape some of its shortcode attributes before…
|
5.4
Moyenne
|
23 janv. 2023 |