Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

GeoDirectory — Vulnerabilities & Security Advisories 19

All 19 CVE vulnerabilities found in GeoDirectory, with AI-generated Chinese analysis, references, and POCs.

This page aggregates security vulnerabilities affecting the GeoDirectory plugin for WordPress, focusing primarily on cross-site scripting, SQL injection, and path traversal weaknesses. It collects publicly reported issues from 2023 through the first quarter of 2024, spanning multiple minor versions. Readers can track the vendor’s advisory history, understand common weakness classes such as improper input validation, and review the product’s complete vulnerability timeline to identify recurring patterns and patch trends.

Vendor: Unknown

CVE ID Title CVSS Severity Published
CVE-2026-84813 WordPress GeoDirectory plugin <= 2.8.174 - SQL Injection vulnerability CWE-89 9.3 Critical 2026-09-03
CVE-2026-81271 WordPress GeoDirectory plugin <= 2.8.176 - Cross Site Request Forgery (CSRF) vulnerability CWE-352 8.8 High 2026-08-27
CVE-2026-66604 WordPress GeoDirectory plugin <= 2.8.173 - Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High 2026-08-20
CVE-2026-68565 WordPress GeoDirectory plugin <= 2.8.172 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium 2026-08-18
CVE-2026-16988 GeoDirectory < 2.8.169 - Unauthenticated Pending/Draft Listing Disclosure via markers REST Endpoint - - 2026-08-09
CVE-2025-15677 GeoDirectory < 2.8.110 - Editor+ Stored XSS via Place Categories - - 2026-08-05
CVE-2026-16968 GeoDirectory < 2.8.168 - Contributor+ User Email Disclosure via geodir_json_search_users - - 2026-08-05
CVE-2026-57681 WordPress GeoDirectory plugin <= 2.8.161 - Server Side Request Forgery (SSRF) vulnerability CWE-918 6.4 Medium 2026-07-02
CVE-2026-54831 WordPress GeoDirectory plugin <= 2.8.162 - SQL Injection vulnerability CWE-89 9.3 Critical 2026-06-26
CVE-2026-39512 WordPress GeoDirectory plugin <= 2.8.152 - SQL Injection vulnerability CWE-89 9.3 Critical 2026-06-15
CVE-2026-42671 WordPress GeoDirectory plugin <= 2.8.157 - Broken Access Control vulnerability CWE-862 6.5 Medium 2026-06-01
CVE-2026-24549 WordPress GeoDirectory plugin <= 2.8.149 - Cross Site Request Forgery (CSRF) vulnerability CWE-352 4.3 Medium 2026-01-23
CVE-2025-6200 GeoDirectory < 2.8.120 - Contributor+ Stored XSS 5.4AI Medium AI 2025-07-11
CVE-2024-56259 WordPress GeoDirectory plugin <= 2.3.84 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium 2025-01-02
CVE-2024-43981 WordPress GeoDirectory plugin <= 2.3.70 - Broken Access Control vulnerability CWE-862 4.3 Medium 2024-11-01
CVE-2024-50437 WordPress GeoDirectory plugin <= 2.3.80 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium 2024-10-28
CVE-2024-43145 WordPress GeoDirectory plugin <= 2.3.61 - SQL Injection vulnerability CWE-89 8.5 High 2024-08-18
CVE-2023-0278 GeoDirectory < 2.2.24 - Admin+ SQLi 7.2 - 2023-02-27
CVE-2022-4775 GeoDirectory < 2.2.22 - Contributor+ Stored XSS via Shortcode 5.4 - 2023-01-23

All 19 known CVE vulnerabilities affecting GeoDirectory with full Chinese analysis, references, and POCs where available.