Advisories · Technology

Paolo GeoDirectory.

Every CVE that names Paolo GeoDirectory among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-84813 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

WordPress GeoDirectory plugin <= 2.8.174 - SQL Injection vulnerability
- Paolo GeoDirectory
- SQL injection
Not analysed yet 3 Sept 2026
CVE-2026-81271 CVE record

CVSS 8.8 High

WordPress GeoDirectory plugin <= 2.8.176 - Cross Site Request Forgery (CSRF) vulnerability
- Paolo GeoDirectory
- Cross-site request forgery (CSRF)
Not analysed yet 27 Aug 2026
CVE-2026-66604 CVE record

CVSS 7.1 High

WordPress GeoDirectory plugin <= 2.8.173 - Cross Site Scripting (XSS) vulnerability
- Paolo GeoDirectory
- Cross-site scripting (XSS)
Not analysed yet 20 Aug 2026
CVE-2026-68565 CVE record

CVSS 6.5 Medium

WordPress GeoDirectory plugin <= 2.8.172 - Cross Site Scripting (XSS) vulnerability
- Paolo GeoDirectory
- Cross-site scripting (XSS)
Not analysed yet 18 Aug 2026
CVE-2026-57681 CVE record

CVSS 6.4 Medium

WordPress GeoDirectory plugin <= 2.8.161 - Server Side Request Forgery (SSRF) vulnerability
- Paolo GeoDirectory
- Server-side request forgery (SSRF)
Not analysed yet 2 Jul 2026
CVE-2026-54831 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

WordPress GeoDirectory plugin <= 2.8.162 - SQL Injection vulnerability
- Paolo GeoDirectory
- SQL injection
Not analysed yet 26 Jun 2026
CVE-2026-39512 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

WordPress GeoDirectory plugin <= 2.8.152 - SQL Injection vulnerability
- Paolo GeoDirectory
- SQL injection
Not analysed yet 15 Jun 2026
CVE-2026-42671 CVE record

CVSS 6.5 Medium

WordPress GeoDirectory plugin <= 2.8.157 - Broken Access Control vulnerability
- Paolo GeoDirectory
- Broken access control
Not analysed yet 1 Jun 2026
CVE-2026-24549 CVE record

CVSS 4.3 Medium

WordPress GeoDirectory plugin <= 2.8.149 - Cross Site Request Forgery (CSRF) vulnerability
- Paolo GeoDirectory
- Cross-site request forgery (CSRF)
Not analysed yet 23 Jan 2026
CVE-2024-56259 CVE record

CVSS 6.5 Medium

WordPress GeoDirectory plugin <= 2.3.84 - Cross Site Scripting (XSS) vulnerability
- Paolo GeoDirectory
- Cross-site scripting (XSS)
Not analysed yet 2 Jan 2025
CVE-2024-50437 CVE record

CVSS 6.5 Medium

WordPress GeoDirectory plugin <= 2.3.80 - Cross Site Scripting (XSS) vulnerability
- Paolo GeoDirectory
- Cross-site scripting (XSS)
Not analysed yet 28 Oct 2024