Medium · 5.3 CVE-2025-62109 EUVD-2025-202031GHSA-4828-4rjm-75q4

WordPress Geo Controller plugin <= 8.9.4 - Sensitive Data Exposure vulnerability

Published Dec 9, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: INFINITUM FORM Product: Geo Controller

Description

Insertion of Sensitive Information Into Sent Data vulnerability in INFINITUM FORM Geo Controller cf-geoplugin allows Retrieve Embedded Sensitive Data.This issue affects Geo Controller: from n/a through <= 8.9.4.

Affected products

Vendor	Product	Affected	Fixed
INFINITUM FORM	Geo Controller	≤ 8.9.4	—

References

https://patchstack.com/database/Wordpress/Plugin/cf-geoplugin/vulnerability/wordpress-geo-controller-plugin-8-9-4-sensitive-data-exposure-vulnerability?_s_id=cve vdb-entry