CVE-2026-114193
HighCVSS 7.5Summary
The GEO my WordPress plugin contains a missing authorization vulnerability that allows exploitation of incorrectly configured access control security levels. The issue affects versions from n/a through 4.5.5.5.
Risk Assessment
A user with insufficient privileges may perform operations they should not have access to, potentially leading to data modification or privilege escalation within the site.
Recommendation
Update the GEO my WordPress plugin to a version later than 4.5.5.5. Review the role permission configuration on the site.
Other vulnerabilities in GEO my WordPress
See allOriginal NVD description (English source)
Missing Authorization vulnerability in Eyal Fitoussi GEO my WordPress geo-my-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GEO my WordPress: from n/a through 4.5.5.5.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS