Threat Database

Threat Entry Updated 2026-10-30

GEO my WordPress - Security Vulnerability (CVE-2026-61992)

Unauthenticated PHP Object Injection in GEO my WordPress

PLUGIN GEO my WordPress

CVE-2026-61992

CRITICAL CVSS 9.8 2026-10-29

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

GEO my WordPress - SQL Injection (CVE-2026-52715)

Unauthenticated SQL Injection in GEO my WordPress

PLUGIN GEO my WordPress

CVE-2026-52715

CRITICAL CVSS 9.3 2026-06-16

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

Geo My Wordpress - Security Vulnerability (CVE-2024-9422)

The GEO my WP WordPress plugin before 4.5, gmw-premium-settings WordPress plugin before 3.1 does not sufficiently validate files to be uploaded, which could allow attackers to upload arbitrary files such as PHP on the server.

PLUGIN Geo My Wordpress

CVE-2024-9422

MEDIUM CVSS 6.6 2024-11-22

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

Geo My Wordpress - Remote Code Execution (CVE-2024-6330)

The GEO my WP WordPress plugin before 4.5.0.2 does not prevent unauthenticated attackers from including arbitrary files in PHP's execution context, which leads to Remote Code Execution.

PLUGIN Geo My Wordpress

CVE-2024-6330

CRITICAL CVSS 9.8 2024-08-19

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

GEO my WordPress - Cross-Site Request Forgery (CSRF) (CVE-2024-32097)

Cross-Site Request Forgery (CSRF) vulnerability in Eyal Fitoussi GEO my WordPress.This issue affects GEO my WordPress: from n/a through 4.1.

PLUGIN GEO my WordPress

CVE-2024-32097

MEDIUM CVSS 5.4 2024-04-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

Geo My Wordpress - SQL Injection (CVE-2023-52134)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Eyal Fitoussi GEO my WordPress.This issue affects GEO my WordPress: from n/a through 4.0.2.

PLUGIN Geo My Wordpress

CVE-2023-52134

HIGH CVSS 7.6 2023-12-31

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

Geo My Wordpress - Cross-Site Scripting (XSS) (CVE-2023-5467)

The GEO my WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 4.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

PLUGIN Geo My Wordpress

CVE-2023-5467

MEDIUM CVSS 6.4 2023-10-10

Risk Score

Open Full Technical Breakdown