PT-2026-4393 · Paolo · Geodirectory

Trương Hữu Phúc + 1 · Published 2026-01-23 · Updated 2026-01-28 · CVE-2026-24549

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Paolo GeoDirectory versions through 2.8.147

Description A Cross-Site Request Forgery (CSRF) issue exists in Paolo GeoDirectory geodirectory, allowing attackers to perform actions on behalf of authenticated users. This can potentially lead to unauthorized actions within the application.

Recommendations Versions prior to 2.8.147 should be updated.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2026-24549

Affected Products

Geodirectory

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-24549 · Security Note
• https://patchstack.com/database/Wordpress/Plugin/geodirectory/vulnerability/wordpress-geodirectory-plugin-2-8-147-cross-site-request-forgery-csrf-vulnerability?_s_id=cve · Note
• https://t.me/cveNotify/150144 · Telegram Post
• https://twitter.com/CVEnew/status/2015086300542456227 · Twitter Post