Advisories · Technology
ninjew GEO my WP.
Every CVE that names ninjew GEO my WP among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.5 High
GEO my WP <= 4.5.5.3 - Unauthenticated Local File Inclusion
- ninjew GEO my WP
- File inclusion
- CVSS 9.1 CriticalCritical · CVSS 9+
GEO my WP <= 4.5.4 - Unauthenticated SQL Injection via 'distance' / 'lat' / 'lng' Parameters
- ninjew GEO my WP
- SQL injection
- CVSS 7.5 High
GEO my WP <= 4.5.5 - Unauthenticated SQL Injection via 'swlatlng' / 'nelatlng' Parameters
- ninjew GEO my WP
- SQL injection
- CVSS 6.4 Medium
GEO my WordPress <= 4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- ninjew GEO my WP
- Cross-site scripting (XSS)