CVE-2026-52715
CriticalCVSS 9.3Exploitation Probability (EPSS)
Elevated risk68th percentile - higher than 68% of all known CVEs
Summary
Versions of GEO my WordPress up to 4.5.5 are vulnerable to unauthenticated SQL Injection.
Risk Assessment
An attacker could exploit this vulnerability to gain access to the database, potentially leading to data leakage or system compromise.
Recommendation
It is recommended to update the GEO my WordPress plugin to the latest version to mitigate this vulnerability.
Other vulnerabilities in GEO my WordPress
See all- CVE-2026-114193High
The GEO my WordPress plugin contains a missing authorization vulnerability that allows exploitation of incorrectly configured access control security levels. The issue affects versions from n/a through 4.5.5.5.
- CVE-2026-61992Critical
PHP Object Injection vulnerability in the GEO my WordPress plugin in versions up to and including 4.5.5.3. It can be exploited by an unauthenticated attacker.
Original NVD description (English source)
Unauthenticated SQL Injection in GEO my WordPress <= 4.5.5 versions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS