CVE-2026-52715

WordPress GEO my WordPress plugin <= 4.5.5 - SQL Injection vulnerability

Unauthenticated SQL Injection in GEO my WordPress <= 4.5.5 versions.

Affected

Eyal Fitoussi · GEO my WordPress

CVSS v3.1 PATCHSTACK

9.3 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L

EPSS

0.40% chance of exploitation in the next 30 days, 33rd percentile

Published

2026-06-16

Proof-of-concept exploits (1)

• 686f6c61/POC-GeoLeak-CVE-2026-527150★ · 2026-08-14

References

• CVE Record
• NVD entry

Related

• CVE-2026-17106
• CVE-2026-19949
• CVE-2026-64638
• CVE-2026-93485