GeoDirectory <= 2.8.186 - Unauthenticated SQL Injection via 'latitude' Parameter via Stored Pending Listing
cve-program ·
Vendor product: GeoDirectory – WP Business Directory Plugin and Classified Listings Directory
No access to your tenant or devices. Every item links to its source. What this means
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
cve-program ·
Vendor product: GeoDirectory – WP Business Directory Plugin and Classified Listings Directory
cve-program ·
Vendor product: GD Rating System
cve-program ·
Vendor product: Strong Testimonials
cve-program ·
Vendor product: SEOPress – AI SEO Plugin & On-site SEO
cve-program ·
Vendor product: Magic Tooltips For Contact Form 7
cve-program ·
Vendor product: All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights)
cve-program ·
Vendor product: Ultra Addons Lite for Elementor
cve-program ·
Vendor product: Simple Membership
cve-program ·
Vendor product: Photo Reviews for WooCommerce
cve-program ·
Vendor product: Welcart e-Commerce
cve-program ·
Vendor product: WPZOOM Connect: AI Chat, Click to Chat, Social Icons & Share Buttons
cve-program ·
Vendor product: SEOPress – AI SEO Plugin & On-site SEO
cve-program ·
Vendor product: Rich Showcase for Google Reviews
cve-program ·
Vendor product: Transliterator – Multilingual and Multi-script Text Conversion
cve-program ·
Vendor product: Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More
cve-program ·
Vendor product: WPC Smart Quick View for WooCommerce
cve-program ·
Vendor product: Burst Statistics – Simple WordPress Analytics (Google Analytics Alternative)
cve-program ·
Vendor product: WPMobile.App – Android and iOS App Builder
cve-program ·
Vendor product: WPC Product Options for WooCommerce
cve-program ·
Vendor product: Responsive Starter Templates – Elementor Templates & Starter Sites
cve-program ·
Vendor product: Photo Gallery by 10Web – Mobile-Friendly Image Gallery
cve-program ·
Vendor product: WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System
cve-program ·
Vendor product: WPFront Notification Bar
cve-program ·
Vendor product: Mail logging & Catcher
cve-program ·
Vendor product: VikAppointments Services Booking Calendar
cve-program ·
Vendor product: WP Ultimate Review
cve-program ·
Vendor product: WP Visitor Statistics (Real Time Traffic)
cve-program ·
Vendor product: Nelio Content – Editorial Calendar & Social Media Auto-Posting
cve-program ·
Vendor product: WPC Estimated Delivery Date for WooCommerce
cve-program ·
Vendor product: Smart Manager – WooCommerce Bulk Edit: Products, Orders, Users & More (Spreadsheet)
cve-program ·
Vendor product: WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System
cve-program ·
Vendor product: WP Ultimate Review
cve-program ·
Vendor product: Chrome
cve-program ·
Vendor product: Chrome
cve-program ·
Vendor product: Twenty20 Image Before-After
cve-program ·
Vendor product: Beaver Builder Page Builder – Drag and Drop Website Builder
cve-program ·
https://wordpress.org/plugins: wp-full-stripe-free
cve-program ·
https://wordpress.org/plugins: aruba-wp-migration-tool
cve-program ·
https://wordpress.org/plugins: premmerce-woocommerce-wishlist
cve-program ·
https://wordpress.org/plugins: learnpress
cve-program ·
https://wordpress.org/plugins: airano-mcp-bridge
cve-program ·
https://wordpress.org/plugins: unlimited-elements-for-elementor
cve-program ·
Vendor product: WP Ultimate Review
cve-program ·
Vendor product: WP Ultimate Review
cve-program ·
Vendor product: WP Ultimate Review
cve-program ·
Vendor product: WP Ultimate Review
cve-program ·
Vendor product: MPG
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.