UNKNOWN NVD

CVE-2026-113492

The GeoDirectory WordPress plugin before 2.8.194 does not perform status, ownership or password checks when loading listings for one of its unauthenticated AJA

The GeoDirectory WordPress plugin before 2.8.194 does not perform status, ownership or password checks when loading listings for one of its unauthenticated AJAX handlers, allowing unauthenticated users to disclose the content of non-public (draft, pending and private) listings by supplying their IDs.

References

https://wpscan.com/vulnerability/5a1c17a0-c513-4f64-91c7-09c0f1878c71/

Published: 2026-10-24 · Source: NVD · Feed updated: 2026-10-24

This unknown severity vulnerability was published on 2026-10-24 via NVD.

vulnfeed aggregates 15883 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.