medium5.3
CVE-2026-114270
The GeoDirectory WordPress plugin before 2.8.197 does not honour post password protection when rendering a listing, allowing unauthenticated users to disclose …
Impact
The GeoDirectory WordPress plugin before 2.8.197 does not honour post password protection when rendering a listing, allowing unauthenticated users to disclose the content and custom fields of published listings that are protected by a post password.
Affected products
| Product | Affected versions |
|---|---|
| GeoDirectory WordPress Plugin | before 2.8.197 |
Versions were read from the advisory text. No structured product data has been published for this record yet.