PatchTheCVEgeo controller vulnerabilities and fixes
Recent CVEs affecting geo controller, with upgrade or downgrade steps. 3 tracked.
Also searched as: geocontroller.
geo controller has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2024-09-05. Highest priority: CVE-2024-3591 (score 43/100).
- CVE-2024-7381 MEDIUM 5.3 UPGRADE The Geo Controller plugin for WordPress is vulnerable to unauthorized shortcode execution due to missing autho
- CVE-2024-7380 MEDIUM 4.3 UPGRADE The Geo Controller plugin for WordPress is vulnerable to unauthorized menu creation/deletion due to missing ca
- CVE-2024-3591 MEDIUM 6.5 UPGRADE The Geo Controller WordPress plugin before 8.6.5 unserializes user input via some of its AJAX actions and REST
FAQ
How do I fix geo controller vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is geo controller being exploited right now?
None of the tracked geo controller CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which geo controller CVE should I patch first?
CVE-2024-3591 currently ranks highest (43/100): The Geo Controller WordPress plugin before 8.6.5 unserializes user input via some of its AJAX actions and REST.