GEO my WordPress vulnerabilities

The GEO my WordPress plugin contains a missing authorization vulnerability that allows exploitation of incorrectly configured access control security levels. The issue affects versions from n/a through 4.5.5.5.

PHP Object Injection vulnerability in the GEO my WordPress plugin in versions up to and including 4.5.5.3. It can be exploited by an unauthenticated attacker.

Versions of GEO my WordPress up to 4.5.5 are vulnerable to unauthenticated SQL Injection.