paoltaia vulnerabilities

CVEs per yearBy the year they were published

1. 20241
2. 20253
3. 202613

Newest CVEs

• CVE-2026-116752

  GeoDirectory <= 2.8.197 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'post_images' Image Title Delimiter Injection

  paoltaia · GeoDirectory – WP Business Directory Plugin and Classified Listings Directory

  Medium6.4
• CVE-2026-119113

  GeoDirectory <= 2.8.199 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'post_content' Parameter

  paoltaia · GeoDirectory – WP Business Directory Plugin and Classified Listings Directory

  Medium6.4
• CVE-2026-118635

  GeoDirectory <= 2.8.198 - Unauthenticated Shortcode Injection via 'pagination_info' Parameter

  paoltaia · GeoDirectory – WP Business Directory Plugin and Classified Listings Directory

  Medium6.5
• CVE-2026-110703

  GeoDirectory <= 2.8.191 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'post_content' Parameter via data-embed-url Attribute

  paoltaia · GeoDirectory – WP Business Directory Plugin and Classified Listings Directory

  Medium6.4
• CVE-2026-111069

  GeoDirectory <= 2.8.192 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'twitterusername' Custom Field

  paoltaia · GeoDirectory – WP Business Directory Plugin and Classified Listings Directory

  Medium6.4
• CVE-2026-107650

  GeoDirectory <= 2.8.190 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Dynamic Content Field-Token Substitution via Listing Title

  paoltaia · GeoDirectory – WP Business Directory Plugin and Classified Listings Directory

  Medium6.4
• CVE-2026-107754

  GeoDirectory <= 2.8.190 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Image Title

  paoltaia · GeoDirectory – WP Business Directory Plugin and Classified Listings Directory

  Medium6.4
• CVE-2026-104899

  GeoDirectory <= 2.8.187 - Unauthenticated Local File Inclusion via 'design_type' Parameter

  paoltaia · GeoDirectory – WP Business Directory Plugin and Classified Listings Directory

  High8.1
• CVE-2026-104993

  GeoDirectory <= 2.8.188 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Contact Email Custom Field

  paoltaia · GeoDirectory – WP Business Directory Plugin and Classified Listings Directory

  Medium6.4
• CVE-2026-103913

  GeoDirectory <= 2.8.186 - Unauthenticated SQL Injection via 'latitude' Parameter via Stored Pending Listing

  paoltaia · GeoDirectory – WP Business Directory Plugin and Classified Listings Directory

  High7.5