WP GeoNames

WP GeoNames has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2024; all 2 are fixed as of October 2026. Their average CVSS score is 6.3, and the most serious one scores 6.4 out of 10. 2024 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 2 of the records (100%).

Every one of the 2 issues recorded for WP GeoNames has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. WP GeoNames is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.

Strategic Overview

Avg CVSSMedium

6.3/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all WP GeoNames vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2024-11757

WP GeoNames <= 1.9.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

2 records


2024-12-11 00:00	WP GeoNames <= 1.9.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting WP GeoNames <= 1.9.0.1	`CVE-2024-11757`	6.4 Medium	SOPROBRO	Yes
2024-12-02 00:00	WP GeoNames <= 1.8 - Reflected Cross-Site Scripting WP GeoNames <= 1.8	`CVE-2024-53812`	6.1 Medium	ardias	Yes

Showing 1–2 of 2 reports

Latestv1.9.3

WP GeoNames

Author

Jacques Malgrange

5.0(2)

100/100

Last Updated

2026-10-12 (16d ago)

Active Installs

100+

Downloads

16,836

Requires WP

5.0+

Requires PHP

7.0+

Tested up to

WP 7.1.3

Created

2014-11-27 (12y ago)

This lightweight plugin makes it easy to install the millions of GEONAMES Data on your WordPress site. It allows : Install data from one or more file (place & postal code) ; Choose column to install to avoid excessive enlargement of the base ; Choose type of data to install (city, park, road…) ; Remove all the data. Check data in the database. Edit and change datas from Dashboard. Display the places on OpenStreetMap. A shortcode is also available to create a city region and country taxonomy. This plugin will give you plenty of ideas to improve the quality of your website. Official GeoNames website.

View on WordPress.org