GeoDirectory – WP Business Directory Plugin and Classified Listings Directory

24 known CVEs 10K+ active installs

Scan My Site Free
UNKNOWN: 24
Known Vulnerabilities 24
CVE-2026-116752 UNKNOWN EPSS 0.3%
Published 2026-10-31 · Affected: ≤2.8.197 · Fixed in 2.8.197
The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'post_images' parameter in all versions up t
CVE-2026-119113 UNKNOWN EPSS 0.3%
Published 2026-10-30 · Affected: ≤2.8.199 · Fixed in 2.8.199
The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the listing description (post_content) in versio
CVE-2026-119113 UNKNOWN EPSS 0.3%
Published 2026-10-30 · Affected: ≤2.8.199 · Fixed in 2.8.199
The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the listing description (post_content) in versio
CVE-2026-104899 UNKNOWN EPSS 0.5%
Published 2026-10-10 · Affected: ≤2.8.187 · Fixed in 2.8.187
The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.8.187 via the 'desi
CVE-2026-104993 UNKNOWN EPSS 0.1%
Published 2026-10-10 · Affected: ≤2.8.188 · Fixed in 2.8.188
The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'email (Contact Email custom field htmlvar_n
CVE-2026-104993 UNKNOWN EPSS 0.1%
Published 2026-10-10 · Affected: ≤2.8.188 · Fixed in 2.8.188
The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'email (Contact Email custom field htmlvar_n
CVE-2026-103913 UNKNOWN EPSS 0.3%
Published 2026-10-03 · Affected: ≤2.8.186 · Fixed in 2.8.186
The GeoDirectory plugin for WordPress is vulnerable to SQL Injection via the stored latitude/longitude coordinates of a listing in versions up to, and including, 2.8.186. This is due to insufficient e
CVE-2026-96766 UNKNOWN EPSS 0.1%
Published 2026-09-25 · Affected: ≤2.8.183 · Fixed in 2.8.183
The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'business_hours' parameter in all versions u
CVE-2026-96766 UNKNOWN EPSS 0.1%
Published 2026-09-25 · Affected: ≤2.8.183 · Fixed in 2.8.183
The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'business_hours' parameter in all versions u
CVE-2026-93897 UNKNOWN EPSS 0.1%
Published 2026-09-25 · Affected: ≤2.8.181 · Fixed in 2.8.181
The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Text-type Custom Field (e.g., 'phone') in all ve
CVE-2026-93897 UNKNOWN EPSS 0.1%
Published 2026-09-25 · Affected: ≤2.8.181 · Fixed in 2.8.181
The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Text-type Custom Field (e.g., 'phone') in all ve
CVE-2025-12833 UNKNOWN EPSS 0.2%
Published 2025-11-12 · Affected: See advisory
The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.8.139 v
CVE-2025-6200 UNKNOWN EPSS 0.2%
Published 2025-07-11 · Affected: See advisory
The GeoDirectory WordPress plugin before 2.8.120 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could all
CVE-2025-6200 UNKNOWN EPSS 0.2%
Published 2025-07-11 · Affected: See advisory
The GeoDirectory WordPress plugin before 2.8.120 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could all
CVE-2024-56259 UNKNOWN EPSS 0.3%
Published 2025-01-02 · Affected: See advisory
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Paolo GeoDirectory geodirectory allows Stored XSS.This issue affects GeoDirectory: from n/a throug
CVE-2024-56259 UNKNOWN EPSS 0.3%
Published 2025-01-02 · Affected: See advisory
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Paolo GeoDirectory geodirectory allows Stored XSS.This issue affects GeoDirectory: from n/a throug
CVE-2024-56259 UNKNOWN EPSS 0.3%
Published 2025-01-02 · Affected: See advisory
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Paolo GeoDirectory geodirectory allows Stored XSS.This issue affects GeoDirectory: from n/a throug
CVE-2024-56259 UNKNOWN EPSS 0.3%
Published 2025-01-02 · Affected: See advisory
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Paolo GeoDirectory geodirectory allows Stored XSS.This issue affects GeoDirectory: from n/a throug
CVE-2024-50437 UNKNOWN EPSS 0.2%
Published 2024-10-28 · Affected: See advisory
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Paolo GeoDirectory geodirectory allows Stored XSS.This issue affects GeoDirectory: from n/a throug
CVE-2024-50437 UNKNOWN EPSS 0.2%
Published 2024-10-28 · Affected: See advisory
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Paolo GeoDirectory geodirectory allows Stored XSS.This issue affects GeoDirectory: from n/a throug
CVE-2024-50437 UNKNOWN EPSS 0.2%
Published 2024-10-28 · Affected: See advisory
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Paolo GeoDirectory geodirectory allows Stored XSS.This issue affects GeoDirectory: from n/a throug
CVE-2024-50437 UNKNOWN EPSS 0.2%
Published 2024-10-28 · Affected: See advisory
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Paolo GeoDirectory geodirectory allows Stored XSS.This issue affects GeoDirectory: from n/a throug
CVE-2024-3732 UNKNOWN EPSS 0.3%
Published 2024-04-23 · Affected: See advisory
The GeoDirectory – WordPress Business Directory Plugin, or Classified Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'gd_single_tabs' shortcode in all ver
CVE-2024-3732 UNKNOWN EPSS 0.3%
Published 2024-04-23 · Affected: See advisory
The GeoDirectory – WordPress Business Directory Plugin, or Classified Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'gd_single_tabs' shortcode in all ver

Is GeoDirectory – WP Business Directory Plugin and Classified Listings Directory running on your site?

A free scan detects your plugins and flags any that match these CVEs.

Scan My Site Free