Geodirectory

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:ayecode:geodirectory:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorAyecode (075372bf-4710-5b02-aa7e-ef70a5044052)
ProductGeodirectory (5e97b06b-a10f-5483-8477-45688a75a7cb)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/ayecode/geodirectory purl2cpe 2026-06-01 10:13:12.935236
pkg:github/geodirectory/geodirectory purl2cpe 2026-06-01 10:13:12.935238
pkg:github/wp-plugins/geodirectory purl2cpe 2026-06-01 10:13:12.935240

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-6200 vulnerable 2026-06-08 07:43:14.527286 GeoDirectory < 2.8.120 - Contributor+ Stored XSS
The GeoDirectory WordPress plugin before 2.8.120 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
Published: 2025-07-11T06:00:11.028Z
Updated: 2026-01-09T20:22:59.234Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-56259 vulnerable 2026-06-08 06:54:17.632287 WordPress GeoDirectory plugin <= 2.3.84 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Paolo GeoDirectory geodirectory allows Stored XSS.This issue affects GeoDirectory: from n/a through <= 2.3.84.
Published: 2025-01-02T12:01:27.441Z
Updated: 2026-04-28T16:10:56.199Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-50437 vulnerable 2026-06-08 06:52:10.087860 WordPress GeoDirectory plugin <= 2.3.80 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Paolo GeoDirectory geodirectory allows Stored XSS.This issue affects GeoDirectory: from n/a through <= 2.3.80.
Published: 2024-10-28T18:11:59.493Z
Updated: 2026-05-12T22:58:33.637Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-43981 vulnerable 2026-06-08 06:45:53.347614 WordPress GeoDirectory plugin <= 2.3.70 - Broken Access Control vulnerability
MEDIUM (4.3)
Missing Authorization vulnerability in AyeCode – WP Business Directory Plugins GeoDirectory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GeoDirectory: from n/a through 2.3.70.
Published: 2024-11-01T14:17:12.453Z
Updated: 2026-04-28T16:10:15.082Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-43145 vulnerable 2026-06-08 06:45:49.686005 WordPress GeoDirectory plugin <= 2.3.61 - SQL Injection vulnerability
HIGH (8.5)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AyeCode Ltd GeoDirectory.This issue affects GeoDirectory: from n/a through 2.3.61.
Published: 2024-08-18T21:42:42.650Z
Updated: 2026-04-28T16:10:09.184Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3732 vulnerable 2026-06-08 06:43:51.332996 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50845 vulnerable 2026-06-08 06:16:16.851386 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-4775 vulnerable 2026-06-08 05:52:00.352566 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-24720 vulnerable 2026-06-08 05:30:39.077118 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.