GEO My WordPress - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/vendors/geo-my-wordpress/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioThu, 29 Oct 2026 20:40:07 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgGEO my WordPress: Unauthenticated PHP Object Injection (CVE-2026-61992)https://feed.craftedsignal.io/briefs/2026-10-geo-my-wordpress-php-injection/Thu, 29 Oct 2026 20:40:07 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-geo-my-wordpress-php-injection/The GEO my WordPress plugin (versions 4.5.5.3 and earlier) is vulnerable to unauthenticated PHP object injection.GEO my WordPress versions 4.5.5.3 and earlier contain an unauthenticated PHP object injection vulnerability.

Impact

The vulnerability has a CVSS v3.1 base score of 9.8.

]]>criticaladvisory