Geo My Wordpress

geo_my_wordpress

Vendor: Geomywp • 4 CVEs

CVEs (4)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-9422 1Geomywp 2Geo My Wordpress Geo My Wordpress Premium Settings Jun 17, 2026 Nov 22, 2024 N/A· v4 6.6 MEDIUM· v3 N/A· v2 The GEO my WP WordPress plugin before 4.5, gmw-premium-settings WordPress plugin before 3.1 does not sufficiently validate files to be uploaded, which could allow attackers to upload arbitrary files such as PHP on the se...Show more The GEO my WP WordPress plugin before 4.5, gmw-premium-settings WordPress plugin before 3.1 does not sufficiently validate files to be uploaded, which could allow attackers to upload arbitrary files such as PHP on the server.Show less
CVE-2024-6330 1Geomywp 1Geo My Wordpress Jun 17, 2026 Aug 19, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 The GEO my WP WordPress plugin before 4.5.0.2 does not prevent unauthenticated attackers from including arbitrary files in PHP's execution context, which leads to Remote Code Execution.
CVE-2023-52134 1Geomywp 1Geo My Wordpress Jun 17, 2026 Dec 31, 2023 N/A· v4 7.2 HIGH· v3 N/A· v2 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Eyal Fitoussi GEO my WordPress.This issue affects GEO my WordPress: from n/a through 4.0.2.
CVE-2023-5467 1Geomywp 1Geo My Wordpress Jun 17, 2026 Oct 10, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 The GEO my WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 4.0 due to insufficient input sanitization and output escaping on user supplied attr...Show more The GEO my WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 4.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.Show less