CVE-2026-104899 | paoltaia GeoDirectory Plugin up to 2.8.187 on WordPress design_type file inclusion

October 10, 2026 Yanac

A vulnerability marked as critical has been reported in paoltaia GeoDirectory Plugin up to 2.8.187 on WordPress. Affected is an unknown function. The manipulation of the argument design_type leads to file inclusion.

This vulnerability is listed as CVE-2026-104899. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More