Skip to content
Threat Feed
Subscribe

Vendor

GEO My WP

1 brief RSS
critical advisory

CVE-2026-15300: Critical SQL Injection in GEO my WP WordPress Plugin

A critical SQL Injection vulnerability, identified as CVE-2026-15300, was found in the GEO my WP plugin for WordPress, affecting versions up to and including 4.5.4, allowing attackers to inject SQL payloads through the 'distance', 'lat', and 'lng' parameters, leading to potential data compromise or denial of service.

GEO my WP plugin <= 4.5.4 wordpress plugin sql-injection vulnerability webserver
1r 2t 1c