Login Request a demo
GE
Product
GeoDirectory
by · last CVE Oct 29, 2026
15
CVEs
0
On KEV
7.5
Max CVSS
11
New 30D
Vulnerabilities15In the news0Timeline
Severity mix
Critical 0High 2Medium 10Low 3
Severity
All severities15Critical0High2Medium10Low3
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add GeoDirectory to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-113488
New
6.8
0%
Oct 28
GeoDirectory < 2.8.196 - Contributor+ Stored XSS via gd_post_badge 'cta' Attribute
Affected: before 2.8.196
CVE-2026-113487
New
6.8
0%
Oct 28
GeoDirectory < 2.8.196 - Contributor+ Stored XSS via gd_post_badge 'link' Attribute
Affected: before 2.8.196
CVE-2026-113493
New
6.8
0%
Oct 24
GeoDirectory < 2.8.194 - Contributor+ Stored XSS via gd_map Shortcode width Attribute
Affected: before 2.8.194
CVE-2026-16968
6.5
0%
Aug 5
GeoDirectory < 2.8.168 - Contributor+ User Email Disclosure via geodir_json_search_users
Affected: before 2.8.168
CVE-2026-113491
New
6.4
0%
Oct 24
GeoDirectory < 2.8.194 - Subscriber+ Media File Disclosure and Deletion via Path Traversal
Affected: before 2.8.194
CVE-2025-6200
5.9
0%
Jul 11
GeoDirectory < 2.8.120 - Contributor+ Stored XSS
Affected: before 2.8.120
CVE-2026-114270
New
5.3–Oct 29
GeoDirectory < 2.8.197 - Unauthenticated Password-Protected Listing Content Disclosure
Affected: before 2.8.197
CVE-2026-113492
New
5.3
0%
Oct 24
GeoDirectory < 2.8.194 - Unauthenticated Non-Public Listing Disclosure via Recently Viewed Listings AJAX Action
Affected: before 2.8.194
CVE-2026-113490
New
5.3
0%
Oct 24
GeoDirectory < 2.8.194 - Unauthenticated Non-Public Listing Disclosure via Marker Popup REST Endpoint
Affected: before 2.8.194
CVE-2026-113489
New
4.3
0%
Oct 24
GeoDirectory < 2.8.194 - Subscriber+ Arbitrary Listing Image Modification via IDOR
Affected: before 2.8.194
Showing 10