CVE-2026-113488 | GeoDirectory Plugin up to 2.8.195 on WordPress Shortcode cross site scripting

October 28, 2026 Yanac

A vulnerability has been found in GeoDirectory Plugin up to 2.8.195 on WordPress and classified as problematic. The impacted element is an unknown function of the component Shortcode Handler. Performing a manipulation results in cross site scripting.

This vulnerability is identified as CVE-2026-113488. The attack can be initiated remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More