Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Paolo — Vulnerabilities & Security Advisories 11

Browse all 11 CVE security advisories affecting Paolo. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Paolo primarily develops web applications and APIs for enterprise clients, with a core use case in customer-facing authentication systems. Historically, Paolo's code has been associated with Cross-Site Scripting (XSS) and Remote Code Execution (RCE) vulnerabilities, often stemming from improper input validation and insecure deserialization. Security characteristics include inconsistent patch management and insufficient logging mechanisms. While no major public incidents have been documented, Paolo's three CVEs highlight recurring issues in session handling and access control, suggesting a pattern of insufficient security-by-design implementation in development workflows.

Top products by Paolo: GeoDirectory
CVE ID Title CVSS Severity Published
CVE-2026-84813 WordPress GeoDirectory plugin <= 2.8.174 - SQL Injection vulnerability — GeoDirectory CWE-89 9.3 Critical 2026-09-03
CVE-2026-81271 WordPress GeoDirectory plugin <= 2.8.176 - Cross Site Request Forgery (CSRF) vulnerability — GeoDirectory CWE-352 8.8 High 2026-08-27
CVE-2026-66604 WordPress GeoDirectory plugin <= 2.8.173 - Cross Site Scripting (XSS) vulnerability — GeoDirectory CWE-79 7.1 High 2026-08-20
CVE-2026-68565 WordPress GeoDirectory plugin <= 2.8.172 - Cross Site Scripting (XSS) vulnerability — GeoDirectory CWE-79 6.5 Medium 2026-08-18
CVE-2026-57681 WordPress GeoDirectory plugin <= 2.8.161 - Server Side Request Forgery (SSRF) vulnerability — GeoDirectory CWE-918 6.4 Medium 2026-07-02
CVE-2026-54831 WordPress GeoDirectory plugin <= 2.8.162 - SQL Injection vulnerability — GeoDirectory CWE-89 9.3 Critical 2026-06-26
CVE-2026-39512 WordPress GeoDirectory plugin <= 2.8.152 - SQL Injection vulnerability — GeoDirectory CWE-89 9.3 Critical 2026-06-15
CVE-2026-42671 WordPress GeoDirectory plugin <= 2.8.157 - Broken Access Control vulnerability — GeoDirectory CWE-862 6.5 Medium 2026-06-01
CVE-2026-24549 WordPress GeoDirectory plugin <= 2.8.149 - Cross Site Request Forgery (CSRF) vulnerability — GeoDirectory CWE-352 4.3 Medium 2026-01-23
CVE-2024-56259 WordPress GeoDirectory plugin <= 2.3.84 - Cross Site Scripting (XSS) vulnerability — GeoDirectory CWE-79 6.5 Medium 2025-01-02
CVE-2024-50437 WordPress GeoDirectory plugin <= 2.3.80 - Cross Site Scripting (XSS) vulnerability — GeoDirectory CWE-79 6.5 Medium 2024-10-28

This page lists every published CVE security advisory associated with Paolo. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.