cleantalk
Vulnerabilities and Security Researches

GeoDirectory – WordPress Business Directory Plugin, or Classified Directory, CVE-2026-39512

CVE, Research URL

CVE-2026-39512

Published on
Jun 16, 2026
Research Description
Unauthenticated SQL Injection in GeoDirectory <= 2.8.152 versions.
Affected versions
max 2.8.154.
Status
vulnerable