Mmastodon TechnologyCybersecurity first seen 1 d ago, last 1 d ago, peak #12

GEO my WordPress plugin hit by missing authorization flaw

Original: 🚨 EUVD-2026-112732 📊 Score: 7.5/10 (CVSS v3.1) 📦 Product: GEO my WordPress 🏢 Vendor: Eyal Fitoussi 📅 Updated: 2026-10-29

A vulnerability tracked as EUVD-2026-112732 has been disclosed in GEO my WP, the WordPress location and mapping plugin by developer Eyal Fitoussi. The flaw, rated 7.5 out of 10 under CVSS v3.1, is a missing authorization issue that lets attackers exploit incorrectly configured access controls. Details were updated on 29 October 2026, and administrators running the plugin are advised to check for patched versions.

Why now: WordPress site administrators monitoring newly published vulnerability disclosures need to know if the plugin they use is affected.

GEO my WPEyal FitoussiWordPressEUVD-2026-112732

Open on mastodon →

Evidence

• 🚨 EUVD-2026-112732 📊 Score: 7.5/10 (CVSS v3.1) 📦 Product: GEO my WordPress 🏢 Vendor: Eyal Fitoussi 📅 Updated: 2026-10-29 📝 Missing Authorization vulnerability in Eyal Fitoussi GEO my WordPress geo-my-wp allows Exploiting Incorrectly Configured Access Control Security… · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/4114225