PT-2025-49998 · Infinitum Form+1 · Geo Controller+1
CVE-2025-62109
·
Published
2025-12-08
·
Updated
2025-12-09
CVSS v3.1
5.3
Medium
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Geo Controller versions prior to 8.9.6
Description
The Geo Controller plugin for WordPress contains a flaw that allows unauthenticated attackers to retrieve embedded sensitive user or configuration data. This occurs due to the insertion of sensitive information into sent data.
Recommendations
Update the plugin to version 8.9.6 or later.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Geo Controller
Cf-Geoplugin