Eyal Fitoussi GEO my WordPress vulnerabilities

13 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.

Latest Eyal Fitoussi GEO my WordPress vulnerabilities

CVE-2026-114193 — WordPress GEO my WordPress plugin <= 4.5.5.5 - Broken Access Control vulnerability (CVSS 7.5)
CVE-2026-85200 — GEO my WP <= 4.5.5.3 - Unauthenticated Local File Inclusion (CVSS 7.5)
CVE-2026-15260 — Geo My WP < 4.5.5.3 - Subscriber+ Arbitrary Geolocation Record Modification and Deletion via IDOR (CVSS 4.3)
CVE-2026-15300 — GEO my WP <= 4.5.4 - Unauthenticated SQL Injection via 'distance' / 'lat' / 'lng' Parameters (CVSS 9.1)
CVE-2026-52715 — WordPress GEO my WordPress plugin <= 4.5.5 - SQL Injection vulnerability (CVSS 9.3)
CVE-2026-9757 — GEO my WP <= 4.5.5 - Unauthenticated SQL Injection via 'swlatlng' / 'nelatlng' Parameters (CVSS 7.5)
CVE-2024-54326 — WordPress GEO my WP plugin <= 4.5.0.4 - Broken Access Control vulnerability (CVSS 6.5)
CVE-2024-9422 — GEO My WordPress < 4.5 - Admin+ Arbitrary File Upload (CVSS 6.6)
CVE-2024-47327 — WordPress GEO my WP plugin <= 4.5.0.3 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
CVE-2024-6330 — GEO my WordPress < 4.4.0.2 - Unauthenticated RCE via LFI (CVSS 9.8)
CVE-2024-32097 — WordPress GEO my WordPress plugin <= 4.1 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 5.4)
CVE-2023-52134 — WordPress GEO my WordPress Plugin <= 4.0.2 is vulnerable to SQL Injection (CVSS 7.2)
CVE-2023-5467 — GEO my WordPress <= 4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 5.4)