| Package | Affected versions | Patched versions |
|---|---|---|
| geo my wordpress | < 4.5 | 4.5 |
| geo my wordpress premium settings | < 3.1 | 3.1 |
The GEO my WP WordPress plugin before 4.5, gmw-premium-settings WordPress plugin before 3.1 does not sufficiently validate files to be uploaded, which could allow attackers to upload arbitrary files such as PHP on the server.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free