Skip to content

CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2026-78286

WordPress Geo Controller plugin <= 8.9.8 - PHP Object Injection vulnerability

Read JSON ↗CVE.org ↗

Status: Published
Published: 2026-08-27
Updated: 2026-08-28
Assigning organization: Patchstack

Description

Unauthenticated PHP Object Injection in Geo Controller <= 8.9.8 versions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

INFINITUM FORM Geo Controller

Default version status: unaffected

n/a to ≤ 8.9.8affected

References

https://patchstack.com/database/wordpress/plugin/cf-geoplugin/vulnerability/wordpress-geo-controller-plugin-8-9-8-php-object-injection-vulnerability?_s_id=cve ↗