Infinitumform Geo Controller
3 CVEs affecting Infinitumform Geo Controller. Latest disclosed: 2024-09-05. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-3591 | Medium | 6.5 | 2024-05-01 | The Geo Controller WordPress plugin before 8.6.5 unserializes user input via some of its AJAX actions and REST API routes, which could allow unauthenticated us… |
CVE-2024-7381 | Medium | 5.3 | 2024-09-05 | The Geo Controller plugin for WordPress is vulnerable to unauthorized shortcode execution due to missing authorization and capability checks on the ajax__short… |
CVE-2024-7380 | Medium | 4.3 | 2024-09-05 | The Geo Controller plugin for WordPress is vulnerable to unauthorized menu creation/deletion due to missing capability checks on the ajax__geolocate_menu and a… |