Section

Vulnerabilities

CVE records from NVD, ZDI advisories and the CISA KEV catalog, with CVSS, EPSS, SSVC and exploitation state.

3 matching records.

1. 23
   CVE NVD 22h ago

   The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting…

   The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'post_images' parameter in all versions up to, and including, 2.8.197 due…

   CVSS 6.4 CVE-2026-116752 Paoltaia Web platform
2. 18
   CVE NVD 38h ago

   The The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to arbitrary shortcode…

   The The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.8.198 This is due to the software…

   CVSS 6.5 CVE-2026-118635 Paoltaia Web platform
3. 14
   CVE NVD 38h ago

   The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting…

   The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the listing description (post_content) in versions up to, and including…

   CVSS 6.4 CVE-2026-119113 Paoltaia Web platform

Same filters as JSON: /api/items?category=vuln&window=30d&vendor=Paoltaia&limit=100. RSS for this section: feed.xml.