Advisories · Technology
GeoDirectory.
Every CVE that names GeoDirectory among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
GeoDirectory < 2.8.197 - Unauthenticated Password-Protected Listing Content Disclosure
- GeoDirectory
- Information disclosure
- CVSS 2.7 Low
GeoDirectory < 2.8.195 - Contributor+ Non-Public Listing Disclosure via gd_post_content Shortcode
- GeoDirectory
- Information disclosure
- CVSS 6.8 Medium
GeoDirectory < 2.8.196 - Contributor+ Stored XSS via gd_post_badge 'cta' Attribute
- GeoDirectory
- Cross-site scripting (XSS)
- CVSS 6.8 Medium
GeoDirectory < 2.8.196 - Contributor+ Stored XSS via gd_post_badge 'link' Attribute
- GeoDirectory
- Cross-site scripting (XSS)
- CVSS 3.7 Low
GeoDirectory < 2.8.194 - Unauthenticated Guest-Submitted Listing Modification
- GeoDirectory
- Broken access control
- CVSS 7.2 High
GeoDirectory < 2.8.194 - Admin+ RCE via DB Text Export
- GeoDirectory
- Code injection
- CVSS 6.8 Medium
GeoDirectory < 2.8.194 - Contributor+ Stored XSS via gd_map Shortcode width Attribute
- GeoDirectory
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
GeoDirectory < 2.8.194 - Unauthenticated Non-Public Listing Disclosure via Recently Viewed Listings AJAX Action
- GeoDirectory
- Information disclosure
- CVSS 6.4 Medium
GeoDirectory < 2.8.194 - Subscriber+ Media File Disclosure and Deletion via Path Traversal
- GeoDirectory
- Path traversal
- CVSS 5.3 Medium
GeoDirectory < 2.8.194 - Unauthenticated Non-Public Listing Disclosure via Marker Popup REST Endpoint
- GeoDirectory
- Information disclosure
- CVSS 4.3 Medium
GeoDirectory < 2.8.194 - Subscriber+ Arbitrary Listing Image Modification via IDOR
- GeoDirectory
- Broken access control
- CVSS 7.5 High
GeoDirectory < 2.8.169 - Unauthenticated Pending/Draft Listing Disclosure via markers REST Endpoint
- GeoDirectory
- Information disclosure
- CVSS 3.5 Low
GeoDirectory < 2.8.110 - Editor+ Stored XSS via Place Categories
- GeoDirectory
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
GeoDirectory < 2.8.168 - Contributor+ User Email Disclosure via geodir_json_search_users
- GeoDirectory
- Information disclosure
- CVSS 5.9 Medium
GeoDirectory < 2.8.120 - Contributor+ Stored XSS
- GeoDirectory
- Cross-site scripting (XSS)
- CVSS 7.2 High
GeoDirectory < 2.2.24 - Admin+ SQLi
- GeoDirectory
- CVSS 5.4 Medium
GeoDirectory < 2.2.22 - Contributor+ Stored XSS via Shortcode
- GeoDirectory