CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.8.139 via the 'post_attachment_upload' function due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with author-level access and above, to attach arbitrary image files to arbitrary places.
Explanation of Vulnerability in Simple Terms
GeoDirectory versions up to 2.8.139 contain an authorization flaw that allows authenticated users to modify data they should not have access to. The vulnerability requires a logged-in account but no special privileges. An attacker with a low-level user account can alter information within the plugin, potentially affecting business listings or classified data integrity.
What an attacker can do
Modify business listings or classified data that belongs to other users or the site.
Potential impact on your site
Unauthorized changes to business directory listings, classified ads, or user-submitted content by authenticated attackers.
Conditions required to exploit
Attacker must have a valid user account with low-level privileges on the site.
Key dates
External resources
