CVE-2026-78286

WordPress Geo Controller plugin <= 8.9.8 - PHP Object Injection vulnerability PUBLISHED

Description (CNA)

Unauthenticated PHP Object Injection in Geo Controller <= 8.9.8 versions.

Vendor / product	Versions
INFINITUM FORM / Geo Controller	affected n/a through 8.9.8

CWE-502

CISA-ADP

No English description supplied.

No references supplied.