Access violation vulnerability in GeoDirectory – WP Business Directory Plugin and Classified Listings Directory 2.3.70

n The GeoDirectory plugin for WordPress has a security issue that allows people to change data without permission. This happens because the plugin doesn’t have a check to make sure only certain people can use the geodirectory_rated() function. This problem exists in versions 2.3.70 and earlier. It means that someone who is logged in and has at least subscriber-level access can mark the ‘geodirectory_admin_footer_text_rated’ setting as true, even if they shouldn’t be able to.