UNKNOWN NVD

CVE-2026-113674

The GeoDirectory WordPress plugin before 2.8.194 does not correctly verify ownership of listings submitted by logged-out users before allowing them to be edite

The GeoDirectory WordPress plugin before 2.8.194 does not correctly verify ownership of listings submitted by logged-out users before allowing them to be edited, allowing unauthenticated attackers to modify, unpublish, attach images to, or reassign any guest-submitted listing when guest posting is enabled.

References

https://wpscan.com/vulnerability/23e66ca1-50eb-4ac1-9f5f-f830235c5af0/

Published: 2026-10-24 · Source: NVD · Feed updated: 2026-10-24

This unknown severity vulnerability was published on 2026-10-24 via NVD.

vulnfeed aggregates 15883 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.