CVE-2025-12833 | GeoDirectory Plugin up to 2.8.139 on WordPress post_attachment_upload resource injection

A vulnerability marked as problematic has been reported in GeoDirectory Plugin up to 2.8.139 on WordPress. This vulnerability affects the function post_attachment_upload. Performing manipulation results in improper control of resource identifiers.

This vulnerability is cataloged as CVE-2025-12833. It is possible to initiate the attack remotely. There is no exploit available.