Ninjew vulnerabilities
We track 3 vulnerabilities in Ninjew products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on September 12, 2026.
Latest Ninjew vulnerabilities
- 7.5 High severity
GEO my WP: Improper Control of Filename for Include/Require Statement in PHP Program
The GEO my WP plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.5.5.3 via the gmw_posts_locator_ajax_info_window_loader function. This makes it possible for unauthenticated attackers to include and execute arbit
- 9.1 Critical severity
GEO my WP: Improper Neutralization of Special Elements used in an SQL Command
The GEO my WP plugin for WordPress was vulnerable to SQL Injection via the 'distance', 'lat', and 'lng' parameters in versions up to, and including, 4.5.4. The values were read from $_SERVER['QUERY_STRING'] via parse_str() (bypassing wp_magic_quotes, which doe
- 7.5 High severity
GEO my WP: Improper Neutralization of Special Elements used in an SQL Command
The GEO my WP plugin for WordPress is vulnerable to SQL Injection via the 'swlatlng' and 'nelatlng' parameters in all versions up to, and including, 4.5.5 The parameters are read from $_SERVER['QUERY_STRING'] via parse_str() (bypassing WordPress's wp_magic_quo