Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in GeoDirectory – WordPress Business Directory Plugin, or Classified Directory 2.3.28

  • Severity: high-risk
  • Status: Fixed
  • Publication: October 18, 2023

The GeoDirectory plugin for WordPress is a security risk. It can be used to access sensitive information from the database. The problem is present in all versions up to 2.3.28. It occurs because the plugin does not properly escape user-supplied parameters and does not prepare existing SQL queries properly. To protect yourself, you should make sure you have the latest version of the plugin installed.

Detected in:

GeoDirectory – WordPress Business Directory Plugin, or Classified Directory fixed vulnerable versions:
GeoDirectory – WP Business Directory Plugin and Classified Listings Directory fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.