GeoDirectory
Paolo
Developer
2.8.200
Latest version
10,000
Installations
No date
Last updated
Vulnerability history
0 present
50 patched
25 Mitigation rules
- Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability<= 2.8.1971 day ago
- Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability<= 2.8.1991 day ago
- Unauthenticated Shortcode Injection vulnerability<= 2.8.1981 day ago
- Unauthenticated Password-Protected Listing Content Disclosure vulnerability< 2.8.1973 days ago
- Contributor+ Stored XSS vulnerability< 2.8.1964 days ago
- Contributor+ Non-Public Listing Disclosure vulnerability< 2.8.1954 days ago
- Contributor+ Stored XSS vulnerability< 2.8.1964 days ago
- Subscriber+ Media File Disclosure and Deletion vulnerability< 2.8.1946 days ago
- Unauthenticated Guest-Submitted Listing Modification vulnerability< 2.8.19424/10/2026
- Unauthenticated Non-Public Listing Disclosure vulnerability< 2.8.19424/10/2026
- Unauthenticated Non-Public Listing Disclosure vulnerability< 2.8.19424/10/2026
- Contributor+ Stored XSS vulnerability< 2.8.19424/10/2026
- Admin+ RCE vulnerability< 2.8.19424/10/2026
- Subscriber+ Arbitrary Listing Image Modification vulnerability< 2.8.19424/10/2026
- Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability<= 2.8.19116/10/2026
- Authenticated (Subscriber+) Stored Cross-Site Scripting via 'twitterusername' Custom Field vulnerability<= 2.8.19215/10/2026
- Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability<= 2.8.19014/10/2026
- Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability<= 2.8.19014/10/2026
- Unauthenticated Local File Inclusion vulnerability<= 2.8.18709/10/2026
- Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability<= 2.8.18809/10/2026
- Unauthenticated SQL Injection vulnerability<= 2.8.18603/10/2026
- Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability<= 2.8.18325/09/2026
- Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability<= 2.8.18125/09/2026
- SQL Injection vulnerability<= 2.8.17402/09/2026
- Unauthenticated Pending/Draft Listing Disclosure via markers REST Endpoint vulnerability< 2.8.16927/08/2026
- Contributor+ User Email Disclosure via geodir_json_search_users vulnerability< 2.8.16827/08/2026
- Cross Site Request Forgery (CSRF) vulnerability<= 2.8.17626/08/2026
- Cross Site Scripting (XSS) vulnerability<= 2.8.17319/08/2026
- Editor+ Stored XSS via Place Categories vulnerability< 2.8.11018/08/2026
- Cross Site Scripting (XSS) vulnerability<= 2.8.17718/08/2026
- Authenticated (Subscriber+) Arbitrary File Deletion via 'post_type' Parameter via Query-String Bypass in geodir_save_post + geodir_delete_revision vulnerability<= 2.8.16911/08/2026
- Server Side Request Forgery (SSRF) vulnerability<= 2.8.16130/06/2026
- SQL Injection vulnerability<= 2.8.16217/06/2026
- Broken Access Control vulnerability<= 2.8.15713/05/2026
- SQL Injection vulnerability<= 2.8.15213/04/2026
- Cross Site Request Forgery (CSRF) vulnerability<= 2.8.14923/01/2026
- Missing Authorization to Authenticated (Author+) Arbitrary Image Attachment vulnerability<= 2.8.13912/11/2025
- Unauthenticated SQL Injection vulnerability<= 2.8.9725/07/2025
- Contributor+ Stored XSS vulnerability< 2.8.12011/07/2025
- Authenticated (Subscriber+) Stored Cross-Site Scripting via Display_name Parameter vulnerability<= 2.8.9710/02/2025
- Cross Site Scripting (XSS) vulnerability<= 2.3.8430/12/2024
- Cross Site Scripting (XSS) vulnerability<= 2.3.8024/10/2024
- Broken Access Control vulnerability<= 2.3.7028/08/2024
- SQL Injection vulnerability<= 2.3.6107/08/2024
- Authenticated (Contributor+) Stored Cross-Site Scripting via 'gd_single_tabs' Shortcode vulnerability<= 2.3.4823/04/2024
- SQL Injection vulnerability<= 2.3.2821/12/2023
- Admin+ SQLi vulnerability< 2.2.2401/02/2023
- Contributor+ Stored XSS via Shortcode vulnerability< 2.2.2229/12/2022
- CSV Injection vulnerability<= 2.2.1921/12/2022
- Authenticated Stored Cross-Site Scripting (XSS) vulnerability<= 2.1.1.202/09/2021