CVE-2026-107650 | paoltaia GeoDirectory Plugin up to 2.8.190 on WordPress post_title cross site scripting

October 14, 2026 Yanac

A vulnerability was found in paoltaia GeoDirectory Plugin up to 2.8.190 on WordPress. It has been rated as problematic. The affected element is an unknown function. The manipulation of the argument post_title leads to cross site scripting.

This vulnerability is uniquely identified as CVE-2026-107650. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More