GeoDirectory – WordPress Business Directory Plugin, or Classified Directory, CVE-2026-42671
- CVE, Research URL
- Home page URL
- Published on
- Jun 01, 2026
- Research Description
- Missing Authorization vulnerability in Paolo GeoDirectory allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects GeoDirectory: from n/a through 2.8.157.
- Affected versions
-
max 2.8.158.
- Status
-
vulnerable