Description
Unauthenticated PHP Object Injection in Geo Controller <= 8.9.8 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| INFINITUM FORM | Geo Controller | ≤ 8.9.8 | — |
Critical · 9.8
CVE-2026-78286
EUVD-2026-66943GHSA-3h99-6f5g-6j4m
WordPress Geo Controller plugin <= 8.9.8 - PHP Object Injection vulnerability
Published Aug 27, 2026 · Updated Aug 28, 2026 · Assigned by Patchstack