Geo Controller
Infinitum Form · 4 CVEs
CVE-2026-78286
CRITICAL
WordPress Geo Controller plugin <= 8.9.8 - PHP Object Injection vulnerability
Aug 27, 2026
CVE-2025-62109
MEDIUM
WordPress Geo Controller plugin <= 8.9.4 - Sensitive Data Exposure vulnerability
Dec 9, 2025
CVE-2024-7381
MEDIUM
Geo Controller <= 8.6.9 - Missing Authorization to Unauthenticated Shortcode Execution
Sep 5, 2024
CVE-2024-7380
MEDIUM
Geo Controller <= 8.7.3 - Missing Authorization to Authenticated (Subscriber+) Menu Creation/Deletion
Sep 5, 2024
CVE-2024-3591
MEDIUM
WordPress Geo Controller < 8.6.5 - PHP Object Injection
May 1, 2024
CVE-2024-30451
MEDIUM
WordPress Geo Controller plugin <= 8.6.4 - Cross Site Scripting (XSS) vulnerability
Mar 29, 2024
CVE-2024-30227
CRITICAL
WordPress Geo Controller plugin <= 8.6.4 - PHP Object Injection vulnerability
Mar 28, 2024
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-78286 | WordPress Geo Controller plugin <= 8.9.8 - PHP Object Injection vulnerability | CRITICAL | 0.56% | Aug 27, 2026 |
| CVE-2025-62109 | WordPress Geo Controller plugin <= 8.9.4 - Sensitive Data Exposure vulnerability | MEDIUM | 0.29% | Dec 9, 2025 |
| CVE-2024-7381 | Geo Controller <= 8.6.9 - Missing Authorization to Unauthenticated Shortcode Execution | MEDIUM | 0.34% | Sep 5, 2024 |
| CVE-2024-7380 | Geo Controller <= 8.7.3 - Missing Authorization to Authenticated (Subscriber+) Menu Creation/Deletion | MEDIUM | 0.26% | Sep 5, 2024 |
| CVE-2024-3591 | WordPress Geo Controller < 8.6.5 - PHP Object Injection | MEDIUM | 0.49% | May 1, 2024 |
| CVE-2024-30451 | WordPress Geo Controller plugin <= 8.6.4 - Cross Site Scripting (XSS) vulnerability | MEDIUM | 0.35% | Mar 29, 2024 |
| CVE-2024-30227 | WordPress Geo Controller plugin <= 8.6.4 - PHP Object Injection vulnerability | CRITICAL | 0.60% | Mar 28, 2024 |
Showing 1 to 4 of 4 CVEs