Paolo CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

CRITICAL Paolo CVE published 2026-06-15

CVE-2026-39512

The GeoDirectory plugin, versions up to 2.8.152, contains an unauthenticated SQL injection vulnerability. This critical vulnerability allows attackers to inject malicious SQL code without authentication, potentially leading to unauthorized access, data breaches, or system compromise. GeoDirectory plugin users, WordPress administrators, and security teams responsible for vulnerability management should ass [truncated]