AyeCode/geodirectory

GitHub

github.com

wpgeodirectory.com

Releases386

Frequency1 week 4 days

Last Release 15 days ago

Stars42

GeoDirectory is the leading Directory Plugin for WordPress. Compatible with Gutenberg and the most popular page builders such as Elementor, Oxygen, Beaver Builder and Divi. GeoDirectory is the only solution for WordPress that can scale to millions of listings and high traffic.

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2025-12833 ↗	Nov 12, 2025Wednesday, 12 November 2025, 05:15	4.3 MEDIUM	—
The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.8.139 via the 'post_attachment_upload' function due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with author-level access and above, to attach arbitrary image files to arbitrary places.