Geo Content

Geo Content has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Geo Content has a vendor fix available, so running the current release closes it.

All of these findings were reported by zaim. Geo Content is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.

Strategic Overview

Avg CVSSMedium
6.4/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Geo Content vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2024-11887

Geo Content <= 6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records
Geo Content banner
Latestv7.0.1
4.8(8)
96/100
Last Updated
2025-12-02 (10mo ago)
Active Installs
100+
Downloads
5,563
Requires WP
3.0.1+
Requires PHP
0+
Tested up to
WP 6.8.8
Created
2018-03-20 (9y ago)

Create geo targeted content for your website pages. Perfect for personalizing your website by country, state & city. This plugin can allow you to deliver content from Geo Targetly or use WordPress shortcodes to show/hide your own content. This plugin is made by Geo Targetly Paid account is required see pricing Get a 14 day free trial on sign up Features Show content by country, state, city, IP address, latitude-longitude-radius Create multiple pieces of content each targeted at a particular geo location Add default content for non-targeted visitors Restrict content to only certain pages Create content in Geo Targety and inject into your pages Hide/show content based on location using shortcodes Built in analytics Detailed docs can be found below Overview Docs Support Live chat at Geo Targetly External services This plugin connects to an external endpoint via the domain https://g1584674684.co to load and run a script that powers its core functionality, as outlined previously in the description. It sends the user’s location each time the plugin is loaded. This is necessary to determine and customize the plugin’s behavior based on the user’s geographical context. Additionally, this plugin connects to analytics endpoint https://g97676560.co/ to track plugin installation and usage over time. This service is provided by Geo Targetly – Terms of Use, Privacy Policy.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C