Geo Content
Geo Content has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Geo Content has a vendor fix available, so running the current release closes it.
All of these findings were reported by zaim. Geo Content is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.
CVE-2024-11887Geo Content <= 6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records

Geo Content
Author
geotargetly
Create geo targeted content for your website pages. Perfect for personalizing your website by country, state & city. This plugin can allow you to deliver content from Geo Targetly or use WordPress shortcodes to show/hide your own content. This plugin is made by Geo Targetly Paid account is required see pricing Get a 14 day free trial on sign up Features Show content by country, state, city, IP address, latitude-longitude-radius Create multiple pieces of content each targeted at a particular geo location Add default content for non-targeted visitors Restrict content to only certain pages Create content in Geo Targety and inject into your pages Hide/show content based on location using shortcodes Built in analytics Detailed docs can be found below Overview Docs Support Live chat at Geo Targetly External services This plugin connects to an external endpoint via the domain https://g1584674684.co to load and run a script that powers its core functionality, as outlined previously in the description. It sends the user’s location each time the plugin is loaded. This is necessary to determine and customize the plugin’s behavior based on the user’s geographical context. Additionally, this plugin connects to analytics endpoint https://g97676560.co/ to track plugin installation and usage over time. This service is provided by Geo Targetly – Terms of Use, Privacy Policy.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C