What is GHSA-4562-6r2h-7rvw?

GHSA-4562-6r2h-7rvw is a security advisory published by GitHub Security Advisories with Low severity. The GeoDirectory WordPress plugin before 2.8.195 does not perform any status or ownership check...

Which CVE IDs does GHSA-4562-6r2h-7rvw cover?

GHSA-4562-6r2h-7rvw covers the following CVE IDs: CVE-2026-113494. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-4562-6r2h-7rvw?

GHSA-4562-6r2h-7rvw has a CVSS v3 base score of 2.7, published by GitHub Security Advisories.

GHSA-4562-6r2h-7rvwLowCVSS 2.7

The GeoDirectory WordPress plugin before 2.8.195 does not perform any status or ownership check...

Vendor

GitHub Security Advisories

Published

October 28, 2026

Last Modified

October 28, 2026

🔗 CVE IDs covered (1)

CVE-2026-113494 →

📋 Description

The GeoDirectory WordPress plugin before 2.8.195 does not perform any status or ownership check when rendering a listing referenced by an id attribute in its field shortcodes, allowing users with the Contributor role and above to disclose the content and custom fields of other users' draft, pending, private and trashed listings.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-113494
https://wpscan.com/vulnerability/29efa17c-fee7-4bd5-b52c-d0ce73bd786c
https://github.com/advisories/GHSA-4562-6r2h-7rvw