Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

GeoDirectory – WP Business Directory Plugin and Classified Listings Directory — Vulnerabilities & Security Advisories 5

All 5 CVE vulnerabilities found in GeoDirectory – WP Business Directory Plugin and Classified Listings Directory, with AI-generated Chinese analysis, references, and POCs.

Vendor: paoltaia

CVE IDTitleCVSSSeverityPublished
CVE-2026-19091 GeoDirectory <= 2.8.169 - Authenticated (Subscriber+) Arbitrary File Deletion via 'post_type' Parameter via Query-String Bypass in geodir_save_post + geodir_delete_revision CWE-22 8.1 High2026-08-11
CVE-2025-12833 GeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.139 - Missing Authorization to Authenticated (Author+) Arbitrary Image Attachment CWE-639 4.3 Medium2025-11-12
CVE-2024-13507 GeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.97 - Unauthenticated SQL Injection CWE-89 7.5 High2025-07-26
CVE-2024-13506 GeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.97 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Display_name Parameter CWE-79 6.4 Medium2025-02-11
CVE-2024-3732 GeoDirectory – WordPress Business Directory Plugin, or Classified Directory <= 2.3.48 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'gd_single_tabs' Shortcode CWE-79 6.4 Medium2024-04-23

All 5 known CVE vulnerabilities affecting GeoDirectory – WP Business Directory Plugin and Classified Listings Directory with full Chinese analysis, references, and POCs where available.