Skip to content
OpenAdvisories

Vendor

ninjew

4 known vulnerabilities.

Products

GEO my WP 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-85200 Scanner template

    GEO my WP <= 4.5.5.3 - Unauthenticated Local File Inclusion

    The GEO my WP plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.5.5.3 via the gmw_posts_locator_ajax_info_window_loader function. This makes it possible for unauthenticated attackers to include and execute arbi…

    ninjew GEO my WP Web / CMS
  • High 7.5
    CVE-2026-9757

    GEO my WP <= 4.5.5 - Unauthenticated SQL Injection via 'swlatlng' / 'nelatlng' Parameters

    The GEO my WP plugin for WordPress is vulnerable to SQL Injection via the 'swlatlng' and 'nelatlng' parameters in all versions up to, and including, 4.5.5 The parameters are read from $_SERVER['QUERY_STRING'] via parse_str() (bypassing WordPress's wp_magic_qu…

    ninjew GEO my WP Web / CMS