CVE-2026-9757 | ninjew GEO my WP Plugin up to 4.5.5 on WordPress Shortcode QUERY_STRING sql injection

A vulnerability marked as critical has been reported in ninjew GEO my WP Plugin up to 4.5.5 on WordPress. Impacted is an unknown function of the component Shortcode Handler. The manipulation of the argument QUERY_STRING leads to sql injection.

This vulnerability is uniquely identified as CVE-2026-9757. The attack is possible to be carried out remotely. No exploit exists.

It is suggested to upgrade the affected component.