Unknown GeoDirectory

• CVE-2026-114270 Medium 5.3 GeoDirectory < 2.8.197 - Unauthenticated Password-Protected Listing Content Disclosure 0.2%
• CVE-2026-113494 Low 2.7 GeoDirectory < 2.8.195 - Contributor+ Non-Public Listing Disclosure via gd_post_content Shortcode 0.2%
• CVE-2026-113488 Medium 6.8 GeoDirectory < 2.8.196 - Contributor+ Stored XSS via gd_post_badge 'cta' Attribute 0.3%
• CVE-2026-113487 Medium 6.8 GeoDirectory < 2.8.196 - Contributor+ Stored XSS via gd_post_badge 'link' Attribute 0.3%
• CVE-2026-113674 Low 3.7 GeoDirectory < 2.8.194 - Unauthenticated Guest-Submitted Listing Modification 0.2%
• CVE-2026-113673 High 7.2 GeoDirectory < 2.8.194 - Admin+ RCE via DB Text Export 0.6%
• CVE-2026-113493 Medium 6.8 GeoDirectory < 2.8.194 - Contributor+ Stored XSS via gd_map Shortcode width Attribute 0.3%
• CVE-2026-113492 Medium 5.3 GeoDirectory < 2.8.194 - Unauthenticated Non-Public Listing Disclosure via Recently Viewed Listings AJAX Action 0.3%
• CVE-2026-113491 Medium 6.4 GeoDirectory < 2.8.194 - Subscriber+ Media File Disclosure and Deletion via Path Traversal 0.2%
• CVE-2026-113490 Medium 5.3 GeoDirectory < 2.8.194 - Unauthenticated Non-Public Listing Disclosure via Marker Popup REST Endpoint 0.3%
• CVE-2026-113489 Medium 4.3 GeoDirectory < 2.8.194 - Subscriber+ Arbitrary Listing Image Modification via IDOR 0.2%
• CVE-2026-16988 High 7.5 GeoDirectory < 2.8.169 - Unauthenticated Pending/Draft Listing Disclosure via markers REST Endpoint 0.4%
• CVE-2025-15677 Low 3.5 GeoDirectory < 2.8.110 - Editor+ Stored XSS via Place Categories 0.2%
• CVE-2026-16968 Medium 6.5 GeoDirectory < 2.8.168 - Contributor+ User Email Disclosure via geodir_json_search_users 0.4%
• CVE-2025-6200 Medium 5.9 GeoDirectory < 2.8.120 - Contributor+ Stored XSS 0.2%
• CVE-2023-0278 High 7.2 GeoDirectory < 2.2.24 - Admin+ SQLi 0.8%
• CVE-2022-4775 Medium 5.4 GeoDirectory < 2.2.22 - Contributor+ Stored XSS via Shortcode 0.5%