Cpe:2.3:a:geomywp:geo_my_wordpress:*:*:*:*:*:wordpress:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3ageomywpgeo_my_wordpresswordpress/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioSun, 25 Oct 2026 00:37:57 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgGEO my WP: Unauthenticated Local File Inclusion (CVE-2024-6330)https://feed.craftedsignal.io/briefs/2026-10-geo-my-wp-lfi/Sun, 25 Oct 2026 00:37:57 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-geo-my-wp-lfi/The GEO my WP WordPress plugin (versions <= 4.5.0.1) is vulnerable to unauthenticated local file inclusion (LFI) and arbitrary PHP code execution via the 'form[info_window_template][content_path]' parameter. A public exploit PoC has been published.highthreat