Unrated
GeoDirectory < 2.8.194 - Subscriber+ Arbitrary Listing Image Modification via IDOR
Type: advisorySource: Official CVE List
The GeoDirectory WordPress plugin before 2.8.194 does not verify that a referenced attachment belongs to the listing being saved, allowing users with Subscriber-level access and above to modify the title, caption, mod…
Products: GeoDirectoryCVEs: CVE-2026-113489