Unknown GeoDirectory vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 20231
3. 202613
4. 20262

Newest CVEs

• CVE-2026-114270

  GeoDirectory < 2.8.197 - Unauthenticated Password-Protected Listing Content Disclosure

  Unknown · GeoDirectory

  Medium5.3
• CVE-2026-113494

  GeoDirectory < 2.8.195 - Contributor+ Non-Public Listing Disclosure via gd_post_content Shortcode

  Unknown · GeoDirectory

  Low2.7
• CVE-2026-113488

  GeoDirectory < 2.8.196 - Contributor+ Stored XSS via gd_post_badge 'cta' Attribute

  Unknown · GeoDirectory

  Medium6.8
• CVE-2026-113487

  GeoDirectory < 2.8.196 - Contributor+ Stored XSS via gd_post_badge 'link' Attribute

  Unknown · GeoDirectory

  Medium6.8
• CVE-2026-113674

  GeoDirectory < 2.8.194 - Unauthenticated Guest-Submitted Listing Modification

  Unknown · GeoDirectory

  Low3.7
• CVE-2026-113673

  GeoDirectory < 2.8.194 - Admin+ RCE via DB Text Export

  Unknown · GeoDirectory

  High7.2
• CVE-2026-113493

  GeoDirectory < 2.8.194 - Contributor+ Stored XSS via gd_map Shortcode width Attribute

  Unknown · GeoDirectory

  Medium6.8
• CVE-2026-113492

  GeoDirectory < 2.8.194 - Unauthenticated Non-Public Listing Disclosure via Recently Viewed Listings AJAX Action

  Unknown · GeoDirectory

  Medium5.3
• CVE-2026-113491

  GeoDirectory < 2.8.194 - Subscriber+ Media File Disclosure and Deletion via Path Traversal

  Unknown · GeoDirectory

  Medium6.4
• CVE-2026-113490

  GeoDirectory < 2.8.194 - Unauthenticated Non-Public Listing Disclosure via Marker Popup REST Endpoint

  Unknown · GeoDirectory

  Medium5.3