GeoDirectory – WP Business Directory Plugin and Classified Listings Directory

Güvenlik açıkları

• CVE-2026-84813kimlik doğrulamasız≤ 2.8.174

  WordPress GeoDirectory plugin <= 2.8.174 - SQL Injection vulnerability

  Kritik 9.3

• CVE-2026-54831kimlik doğrulamasız≤ 2.8.162

  WordPress GeoDirectory plugin <= 2.8.162 - SQL Injection vulnerability

  Kritik 9.3

• CVE-2026-39512kimlik doğrulamasız≤ 2.8.152

  WordPress GeoDirectory plugin <= 2.8.152 - SQL Injection vulnerability

  Kritik 9.3

• CVE-2026-81271kimlik doğrulamasız · tıklama gerekir≤ 2.8.176

  WordPress GeoDirectory plugin <= 2.8.176 - Cross Site Request Forgery (CSRF) vulnerability

  Yüksek 8.8

• CVE-2024-43981giriş gerekir≤ 2.3.70

  WordPress GeoDirectory plugin <= 2.3.70 - Broken Access Control vulnerability

  Yüksek 8.8

• CVE-2024-43145giriş gerekir≤ 2.3.61

  WordPress GeoDirectory plugin <= 2.3.61 - SQL Injection vulnerability

  Yüksek 8.8

• CVE-2026-19091abone+≤ 2.8.169

  GeoDirectory <= 2.8.169 - Authenticated (Subscriber+) Arbitrary File Deletion via 'post_type' Parameter via Query-String Bypass in geodir_save_post + geodir_del

  Yüksek 8.1

• CVE-2026-103913kimlik doğrulamasız≤ 2.8.186

  GeoDirectory <= 2.8.186 - Unauthenticated SQL Injection via 'latitude' Parameter via Stored Pending Listing

  Yüksek 7.5

• CVE-2024-13507kimlik doğrulamasız≤ 2.8.97

  GeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.97 - Unauthenticated SQL Injection

  Yüksek 7.5

• CVE-2023-50845yüksek yetki≤ 2.3.28

  WordPress GeoDirectory Plugin <= 2.3.28 is vulnerable to SQL Injection

  Yüksek 7.2

• CVE-2026-66604kimlik doğrulamasız · tıklama gerekir≤ 2.8.173

  WordPress GeoDirectory plugin <= 2.8.173 - Cross Site Scripting (XSS) vulnerability

  Yüksek 7.1

• CVE-2026-42671kimlik doğrulamasız≤ 2.8.157

  WordPress GeoDirectory plugin <= 2.8.157 - Broken Access Control vulnerability

  Orta 6.5

• CVE-2026-68565katılımcı+≤ 2.8.172

  WordPress GeoDirectory plugin <= 2.8.172 - Cross Site Scripting (XSS) vulnerability

  Orta 6.5

• CVE-2026-96766abone+≤ 2.8.183

  GeoDirectory <= 2.8.183 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'business_hours' Parameter

  Orta 6.4

• CVE-2026-93897abone+≤ 2.8.181

  GeoDirectory <= 2.8.181 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Text-type Custom Field (e.g., 'phone')

  Orta 6.4

• CVE-2026-57681abone+≤ 2.8.161

  WordPress GeoDirectory plugin <= 2.8.161 - Server Side Request Forgery (SSRF) vulnerability

  Orta 6.4

• CVE-2024-13506abone+≤ 2.8.97

  GeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.97 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Display_na

  Orta 6.4

• CVE-2024-56259giriş gerekir≤ 2.3.84

  WordPress GeoDirectory plugin <= 2.3.84 - Cross Site Scripting (XSS) vulnerability

  Orta 5.4

• CVE-2024-50437giriş gerekir≤ 2.3.80

  WordPress GeoDirectory plugin <= 2.3.80 - Cross Site Scripting (XSS) vulnerability

  Orta 5.4

• CVE-2021-24720giriş gerekir→ 2.1.1.3

  GeoDirectory < 2.1.1.3 - Authenticated Stored Cross-Site Scripting (XSS)

  Orta 5.4

• CVE-2024-3732katılımcı+≤ 2.3.48

  GeoDirectory – WordPress Business Directory Plugin, or Classified Directory <= 2.3.48 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'gd_single_

  Orta 5.4

• CVE-2026-24549kimlik doğrulamasız · tıklama gerekir≤ 2.8.149

  WordPress GeoDirectory plugin <= 2.8.149 - Cross Site Request Forgery (CSRF) vulnerability

  Orta 4.3

• CVE-2025-12833yazar+≤ 2.8.139

  GeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.139 - Missing Authorization to Authenticated (Author+) Arbitrary Image Atta

  Orta 4.3