CVE-2026-107754 | paoltaia GeoDirectory Plugin up to 2.8.190 on WordPress post_images cross site scripting

October 14, 2026 Yanac

A vulnerability identified as problematic has been detected in paoltaia GeoDirectory Plugin up to 2.8.190 on WordPress. This affects an unknown function. This manipulation of the argument post_images causes cross site scripting.

The identification of this vulnerability is CVE-2026-107754. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More