Skip to content
OpenAdvisories
High · 7.6 CVE-2023-50845 EUVD-2023-55578GHSA-f9c3-v8hj-gm62

WordPress GeoDirectory Plugin <= 2.3.28 is vulnerable to SQL Injection

Published Dec 28, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: AyeCode - WordPress Business Directory Plugins Product: GeoDirectory – WordPress Business Directory Plugin, or Classified Directory Category: Web / CMS

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AyeCode - WordPress Business Directory Plugins GeoDirectory – WordPress Business Directory Plugin, or Classified Directory.This issue affects GeoDirectory – WordPress Business Directory Plugin, or Classified Directory: from n/a through 2.3.28.

Affected products

VendorProductAffectedFixed
AyeCode - WordPress Business Directory Plugins GeoDirectory – WordPress Business Directory Plugin, or Classified Directory ≤ 2.3.28 —

References