Known vulnerabilities in the Geodirectory plugin
16 security advisories have been published for the Geodirectory plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- GeoDirectory - Security Vulnerability (CVE-2026-84813) CRITICAL
- GeoDirectory - Cross-Site Request Forgery (CSRF) (CVE-2026-81271) HIGH
- GeoDirectory - Cross-Site Scripting (XSS) (CVE-2026-66604) HIGH
- GeoDirectory - Cross-Site Scripting (XSS) (CVE-2026-68565) MEDIUM
- Geodirectory - Security Vulnerability (CVE-2026-16988) HIGH
- Geodirectory - Security Vulnerability (CVE-2026-16968) MEDIUM
- GeoDirectory - SQL Injection (CVE-2026-54831) CRITICAL
- GeoDirectory - SQL Injection (CVE-2026-39512) CRITICAL
- Geodirectory - Security Vulnerability (CVE-2025-12833) MEDIUM
- Geodirectory - SQL Injection (CVE-2024-13507) HIGH
- Geodirectory - Cross-Site Scripting (XSS) (CVE-2025-6200) MEDIUM
- Geodirectory - Cross-Site Scripting (XSS) (CVE-2024-13506) MEDIUM
- Geodirectory - Cross-Site Scripting (XSS) (CVE-2024-3732) MEDIUM
- Geodirectory - SQL Injection (CVE-2023-50845) HIGH
- Geodirectory - SQL Injection (CVE-2023-0278) HIGH
- Geodirectory - Cross-Site Scripting (XSS) (CVE-2021-24720) MEDIUM