Medium severity6.6NVD Advisory· Published Nov 22, 2024· Updated Jun 17, 2026

CVE-2024-9422

Description

The GEO my WP WordPress plugin before 4.5, gmw-premium-settings WordPress plugin before 3.1 does not sufficiently validate files to be uploaded, which could allow attackers to upload arbitrary files such as PHP on the server.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Geomywp/Geo My Wordpress
cpe:2.3:a:geomywp:geo_my_wordpress:*:*:*:*:*:wordpress:*:*
Range: <4.5
Geomywp/Geo My Wordpress Premium Settings
cpe:2.3:a:geomywp:geo_my_wordpress_premium_settings:*:*:*:*:*:wordpress:*:*
Range: <3.1
WordPress/gmw-premium-settingsllm-create
Range: <3.1
WordPress/Geo My Wpllm-fuzzy2 versions
<4.5+ 1 more
- (no CPE)range: <4.5
- (no CPE)range: 4.0
Package: https://wordpress.org/plugins/geo-my-wp

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/81320923-767c-43f0-a8eb-b398c306c16f/nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.429
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000