geo-my-wp vulnerabilities
CVEs whose affected-version data names the geo-my-wp package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-61992Critical· 9.8WordPress GEO my WordPress plugin <= 4.5.5.4 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in GEO my WordPress <= 4.5.5.3 versions.
▾ MidnightVon Eyal Fitoussi · geo-my-wpEPSS 0.39%via CVEORG
CVE-2026-114193High· 7.5WordPress GEO my WordPress plugin <= 4.5.5.5 - Broken Access Control vulnerability
Missing Authorization vulnerability in Eyal Fitoussi GEO my WordPress geo-my-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GEO my WordPress: from n/a through 4.5.5.5.
▾ TwilightEyal Fitoussi · geo-my-wpEPSS 0.32%via CVEORG