Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-06-17
Cf Geoplugin - Cross-Site Scripting (XSS) (CVE-2023-51513)
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in INTINITUM FORM Geo Controller allows DOM-Based XSS.This issue affects Geo Controller: from n/a through 8.5.2.
PLUGIN
Cf Geoplugin
CVE-2023-51513
Risk Score
Threat Entry
Updated 2026-06-17
Cf Geoplugin - Information Disclosure (CVE-2025-62109)
Insertion of Sensitive Information Into Sent Data vulnerability in INFINITUM FORM Geo Controller cf-geoplugin allows Retrieve Embedded Sensitive Data.This issue affects Geo Controller: from n/a through
PLUGIN
Cf Geoplugin
CVE-2025-62109
Risk Score
Threat Entry
Updated 2026-06-17
Cf Geoplugin - Broken Access Control (CVE-2024-7381)
The Geo Controller plugin for WordPress is vulnerable to unauthorized shortcode execution due to missing authorization and capability checks on the ajax__shortcode_cache function in all versions up to, and including, 8.6.9. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes available on the target site.
PLUGIN
Cf Geoplugin
CVE-2024-7381
Risk Score