Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2026-114270

GeoDirectory < 2.8.197 - Unauthenticated Password-Protected Listing Content Disclosure

Description

The GeoDirectory WordPress plugin before 2.8.197 does not honour post password protection when rendering a listing, allowing unauthenticated users to disclose the content and custom fields of published listings that are protected by a post password.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown GeoDirectory

Default version status: unaffected

  • 0 to < 2.8.197affected

References