CVE-2026-52715
Unauthenticated SQL Injection in GEO my WordPress <= 4.5.5 versions.
- Affected products
- Geo My Wordpress
- CVSS 3.1
- 9.3 CRITICAL
- EPSS
- 0.2% (16th percentile)
- Weakness
- CWE-89
- NVD status
- Deferred
- Published
- 2026-06-16
- Attack patterns
- CAPEC-7
Fix
Update the WordPress GEO my WordPress Plugin to the latest available version (at least 4.5.5.1).
CVE-2026-52715 at NVD
1 known exploit for CVE-2026-52715
Proof-of-concept code and exploit modules indexed by Sploitus