agentprime: paoltaia-geodirectory-wp-business-directory-plugin-and-classified-listings-direcEvery new CVE for paoltaia-geodirectory-wp-business-directory-plugin-and-classified-listings-direc.https://agentprime.io/CVE-2026-116752: GeoDirectory <= 2.8.197 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'post_images' Image Title Delimiter Injectionhttps://agentprime.io/advisories/CVE-2026-116752/https://agentprime.io/advisories/CVE-2026-116752/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 31 Oct 2026 09:29:25 GMTCVECVE-2026-119113: GeoDirectory <= 2.8.199 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'post_content' Parameterhttps://agentprime.io/advisories/CVE-2026-119113/https://agentprime.io/advisories/CVE-2026-119113/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 17:15:33 GMTCVECVE-2026-118635: GeoDirectory <= 2.8.198 - Unauthenticated Shortcode Injection via 'pagination_info' Parameterhttps://agentprime.io/advisories/CVE-2026-118635/https://agentprime.io/advisories/CVE-2026-118635/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 17:15:27 GMTCVECVE-2026-110703: GeoDirectory <= 2.8.191 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'post_content' Parameter via data-embed-url Attributehttps://agentprime.io/advisories/CVE-2026-110703/https://agentprime.io/advisories/CVE-2026-110703/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 09:26:37 GMTCVECVE-2026-111069: GeoDirectory <= 2.8.192 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'twitterusername' Custom Fieldhttps://agentprime.io/advisories/CVE-2026-111069/https://agentprime.io/advisories/CVE-2026-111069/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 06:41:02 GMTCVECVE-2026-107650: GeoDirectory <= 2.8.190 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Dynamic Content Field-Token Substitution via Listing Titlehttps://agentprime.io/advisories/CVE-2026-107650/https://agentprime.io/advisories/CVE-2026-107650/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 07:43:35 GMTCVECVE-2026-107754: GeoDirectory <= 2.8.190 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Image Titlehttps://agentprime.io/advisories/CVE-2026-107754/https://agentprime.io/advisories/CVE-2026-107754/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 07:43:31 GMTCVECVE-2026-104899: GeoDirectory <= 2.8.187 - Unauthenticated Local File Inclusion via 'design_type' Parameterhttps://agentprime.io/advisories/CVE-2026-104899/https://agentprime.io/advisories/CVE-2026-104899/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 10 Oct 2026 05:31:02 GMTCVECVE-2026-104993: GeoDirectory <= 2.8.188 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Contact Email Custom Fieldhttps://agentprime.io/advisories/CVE-2026-104993/https://agentprime.io/advisories/CVE-2026-104993/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 10 Oct 2026 04:26:42 GMTCVECVE-2026-103913: GeoDirectory <= 2.8.186 - Unauthenticated SQL Injection via 'latitude' Parameter via Stored Pending Listinghttps://agentprime.io/advisories/CVE-2026-103913/https://agentprime.io/advisories/CVE-2026-103913/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 03 Oct 2026 05:29:14 GMTCVECVE-2026-96766: GeoDirectory <= 2.8.183 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'business_hours' Parameterhttps://agentprime.io/advisories/CVE-2026-96766/https://agentprime.io/advisories/CVE-2026-96766/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 06:39:54 GMTCVECVE-2026-93897: GeoDirectory <= 2.8.181 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Text-type Custom Field (e.g., 'phone')https://agentprime.io/advisories/CVE-2026-93897/https://agentprime.io/advisories/CVE-2026-93897/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 06:39:51 GMTCVECVE-2026-19091: GeoDirectory <= 2.8.169 - Authenticated (Subscriber+) Arbitrary File Deletion via 'post_type' Parameter via Query-String Bypass in geodir_save_post + geodir_delete_revisionhttps://agentprime.io/advisories/CVE-2026-19091/https://agentprime.io/advisories/CVE-2026-19091/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 19:37:28 GMTCVECVE-2025-12833: GeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.139 - Missing Authorization to Authenticated (Author+) Arbitrary Image Attachmenthttps://agentprime.io/advisories/CVE-2025-12833/https://agentprime.io/advisories/CVE-2025-12833/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Nov 2025 04:29:09 GMTCVECVE-2024-13507: GeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.97 - Unauthenticated SQL Injectionhttps://agentprime.io/advisories/CVE-2024-13507/https://agentprime.io/advisories/CVE-2024-13507/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Jul 2025 03:38:17 GMTCVECVE-2024-13506: GeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.97 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Display_name Parameterhttps://agentprime.io/advisories/CVE-2024-13506/https://agentprime.io/advisories/CVE-2024-13506/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Feb 2025 11:10:03 GMTCVECVE-2024-3732: GeoDirectory – WordPress Business Directory Plugin, or Classified Directory <= 2.3.48 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'gd_single_tabs' Shortcodehttps://agentprime.io/advisories/CVE-2024-3732/https://agentprime.io/advisories/CVE-2024-3732/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 23 Apr 2024 09:32:54 GMTCVE