PatchTheCVE: geodirectoryhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2025-6200: The GeoDirectory WordPress plugin before 2.8.120 does not validate and escape some of its shortcode attributehttps://patchthecve.com/cve/CVE-2025-6200.htmlhttps://patchthecve.com/cve/CVE-2025-6200.htmlWed, 17 Jun 2026 10:01:22 +0000MEDIUM 5.9: The GeoDirectory WordPress plugin before 2.8.120 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.CVE-2024-56259: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Paolo Gehttps://patchthecve.com/cve/CVE-2024-56259.htmlhttps://patchthecve.com/cve/CVE-2024-56259.htmlWed, 17 Jun 2026 08:11:56 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Paolo GeoDirectory geodirectory allows Stored XSS.This issue affects GeoDirectory: from n/a through <= 2.3.84.CVE-2024-43981: Missing Authorization vulnerability in AyeCode – WP Business Directory Plugins GeoDirectory allows Exploiting https://patchthecve.com/cve/CVE-2024-43981.htmlhttps://patchthecve.com/cve/CVE-2024-43981.htmlWed, 17 Jun 2026 07:52:06 +0000MEDIUM 4.3: Missing Authorization vulnerability in AyeCode – WP Business Directory Plugins GeoDirectory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GeoDirectory: from n/a through 2.3.70.CVE-2024-50437: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Paolo Gehttps://patchthecve.com/cve/CVE-2024-50437.htmlhttps://patchthecve.com/cve/CVE-2024-50437.htmlWed, 17 Jun 2026 08:04:28 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Paolo GeoDirectory geodirectory allows Stored XSS.This issue affects GeoDirectory: from n/a through <= 2.3.80.CVE-2024-43145: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AyeCode https://patchthecve.com/cve/CVE-2024-43145.htmlhttps://patchthecve.com/cve/CVE-2024-43145.htmlWed, 17 Jun 2026 07:50:31 +0000HIGH 8.5: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AyeCode Ltd GeoDirectory.This issue affects GeoDirectory: from n/a through 2.3.61.