CyberSecBulletin

Luminfire vulnerabilities

We track 1 vulnerability in Luminfire products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on May 31, 2025.

1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score

Latest Luminfire vulnerabilities

  • 8.8 High severity

    WP-GeoMeta: Improper Authorization

    CVE-2025-4103Luminfire

    The WP-GeoMeta plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the wp_ajax_wpgm_start_geojson_import() function in versions 0.3.4 to 0.3.5. This makes it possible for authenticated attackers, with Subscriber-leve