CVE-2026-81271

Unauthenticated Cross Site Request Forgery (CSRF) in GeoDirectory <= 2.8.176 versions.

Credits

Brian Willows | Patchstack Bug Bounty Program

References

https://patchstack.com/database/wordpress/plugin/geodirectory/vulnerability/wordpress-geodirectory-plugin-2-8-176-cross-site-request-forgery-csrf-vulnerability?_s_id=cve