{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3ageomywpgeo_my_wordpresswordpress/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:geomywp:geo_my_wordpress:*:*:*:*:*:wordpress:*:*"],"_cs_cves":[{"cvss":9.8,"id":"CVE-2024-6330"}],"_cs_exploited":true,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["GEO my WP (\u003c= 4.5.0.1)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"threat","_cs_vendors":[],"content_html":"","date_modified":"2026-10-25T00:37:57Z","date_published":"2026-10-25T00:37:57Z","id":"https://feed.craftedsignal.io/briefs/2026-10-geo-my-wp-lfi/","summary":"The GEO my WP WordPress plugin (versions \u003c= 4.5.0.1) is vulnerable to unauthenticated local file inclusion (LFI) and arbitrary PHP code execution via the 'form[info_window_template][content_path]' parameter. A public exploit PoC has been published.","title":"GEO my WP: Unauthenticated Local File Inclusion (CVE-2024-6330)","url":"https://feed.craftedsignal.io/briefs/2026-10-geo-my-wp-lfi/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:geomywp:geo_my_wordpress:*:*:*:*:*:wordpress:*:*","version":"https://jsonfeed.org/version/1.1"}