Geo Controller - Geolocation & Geotargeting
Healthy: vulnerability published 25 Aug 2026, fixed in 8.9.9.
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 75 |
| Support | 70 |
| Reputation | 70 |
Active signals
Facts we detected, with links to the source.
- WarningSEC-1Vulnerability published 25 Aug 2026, fixed in 8.9.9. Update to version 8.9.9 or later.25 Aug 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| creativform | 21 Dec 2015 to 24 Nov 2025, 187 commits |
|---|---|
| ivijanstefan | 12 Sep 2017 to 22 Oct 2026, 298 commits |
2 committers recorded. No ownership changes recorded since 3 Nov 2026.
Maintenance
- Last release
- 13 days ago
- Releases, 24 months
- 40
- Tested up to
- 7.1 current
- Requires PHP
- 7.0 supported 8.2+
| Q1 2024 | 0 |
|---|---|
| Q2 2024 | 0 |
| Q3 2024 | 27 |
| Q4 2024 | 1 |
| Q1 2025 | 4 |
| Q2 2025 | 2 |
| Q3 2025 | 6 |
| Q4 2025 | 1 |
| Q1 2026 | 0 |
| Q2 2026 | 2 |
| Q3 2026 | 5 |
| Q4 2026 | 19 |
Last release 22 Oct 2026. Tested with WordPress 7.1 (current).
Support
Support history appears after our first snapshots of the forum counts.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 25 Aug 2026 | Geo Controller <= 8.9.8 - Unauthenticated PHP Object Injection | 8.1 | <= 8.9.8 | 8.9.9 | 0 |
| 8 Dec 2025 | Geo Controller <= 8.9.5 - Unauthenticated Information Exposure | 5.3 | <= 8.9.5 | 8.9.6 | 144 |
| 4 Sep 2024 | Geo Controller <= 8.7.3 - Missing Authorization to Authenticated (Subscriber+) Menu Creation/Deletion | 4.3 | <= 8.7.3 | 8.7.4 | 771 |
| 4 Sep 2024 | Geo Controller <= 8.6.9 - Missing Authorization to Unauthenticated Shortcode Execution | 5.3 | <= 8.6.9 | 8.7.0 | 771 |
| 28 Mar 2024 | Geo Controller <= 8.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting | 6.4 | <= 8.6.4 | 8.6.5 | 169 |
| 10 Feb 2024 | Geo Controller <= 8.6.4 - Unauthenticated PHP Object Injection via shortcode REST API Route | 8.8 | <= 8.6.4 | 8.6.5 | 216 |
| 4 Oct 2023 | Geo Controller <= 8.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting | 6.4 | <= 8.5.2 | 8.5.3 | 345 |
| 31 Aug 2021 | WordPress Geolocation Plugin – CF Geo Plugin <= 7.13.11 - Reflected Cross-Site Scripting | 6.1 | <= 7.13.11 | 7.13.12 | 230 |
Source: Wordfence Intelligence.
Reputation
Lifetime rating 4.4 from 31 ratings. Quarterly trends appear as new reviews arrive.
| 5 star | 26 |
|---|---|
| 4 star | 0 |
| 3 star | 1 |
| 2 star | 0 |
| 1 star | 4 |
Momentum
1,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 110 |
|---|---|
| 11 May 2026 | 150 |
| 18 May 2026 | 220 |
| 25 May 2026 | 134 |
| 1 Jun 2026 | 108 |
| 8 Jun 2026 | 109 |
| 15 Jun 2026 | 70 |
| 22 Jun 2026 | 71 |
| 29 Jun 2026 | 694 |
| 6 Jul 2026 | 282 |
| 13 Jul 2026 | 144 |
| 20 Jul 2026 | 129 |
| 27 Jul 2026 | 128 |
| 3 Aug 2026 | 103 |
| 10 Aug 2026 | 73 |
| 17 Aug 2026 | 1,383 |
| 24 Aug 2026 | 374 |
| 31 Aug 2026 | 765 |
| 7 Sep 2026 | 738 |
| 14 Sep 2026 | 364 |
| 21 Sep 2026 | 224 |
| 28 Sep 2026 | 144 |
| 5 Oct 2026 | 721 |
| 12 Oct 2026 | 1,754 |
| 19 Oct 2026 | 1,904 |
| 26 Oct 2026 | 452 |
| 2 Nov 2026 | 45 |
Weekly downloads over the last 4 weeks are 146% above the 27-week average.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
No healthier plugin in the same category yet.
Facts
| Version | 9.0.8 |
|---|---|
| Author | INFINITUM FORM |
| Added | 21 Dec 2015 |
| Last updated | 22 Oct 2026 |
| Active installs | 1,000+ |
| Requires WordPress | 6.0 |
| Tested up to | 7.1.4 |
| Requires PHP | 7.0 |
| Category | E-commerce & Shopping |
| Tags | GeoIP, redirect, geolocation, woocommerce, geotargeting |
Questions
Is Geo Controller - Geolocation & Geotargeting still maintained?
Geo Controller - Geolocation & Geotargeting was last updated on 22 Oct 2026. Its Canary status is Healthy.
Is Geo Controller - Geolocation & Geotargeting safe?
Geo Controller - Geolocation & Geotargeting has no open unpatched vulnerabilities on record. 2 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.
Who owns Geo Controller - Geolocation & Geotargeting?
The wordpress.org author is INFINITUM FORM. Recent committers: ivijanstefan, creativform, plugin-master. We have recorded no ownership change.
What can I use instead of Geo Controller - Geolocation & Geotargeting?
We have no healthier plugin in the same category on record yet.