Product

GeoDirectory – WP Business Directory Plugin and Classified Listings Directory (<= 2.8.187)

1 brief RSS

Unauthenticated Local File Inclusion in GeoDirectory WordPress Plugin

The GeoDirectory plugin for WordPress is vulnerable to unauthenticated local file inclusion (LFI) via the design_type parameter, allowing remote attackers to execute arbitrary PHP code.

GeoDirectory – WP Business Directory Plugin and Classified Listings Directory lfi wordpress web-application-vulnerability

1r 1t 1c 2h ago