Geo Controller

by INFINITUM FORM

View on WordPress.org

74 Quality Score

Active Installs

14/30

The 1,000 active installs are modest, but the popularity score is boosted by strong relative engagement for the niche.

Update Freshness

25/25

The plugin was updated on 2026-07-02 and requires only WordPress 6.0 and PHP 7.0, so it is current and broadly compatible, earning a perfect maintenance score.

User Rating

13/15

A rating of 88 out of 100 from 31 reviewers is strong and consistent, indicating broad user satisfaction.

Support Health

8/15

With 0 support threads opened and 0 resolved, there is simply no public track record of post-sale support, which prevents a higher health score.

WP Compatibility

15/15

A clean compatibility score reflects confirmation against WordPress 7.0 plus low minimum requirements that suit most hosting environments.

Scores higher than 34% of indexed plugins

About

Enhance your WordPress site with Geo Controller – a comprehensive plugin offering advanced location-based features and personalized content delivery.

Active Installs 1k+

Rating ★★★★ 4.4/5

Last Updated 2026-09-11 10:15pm GMT

Requires WordPress 6.0+

Tested Up To 7.1

Requires PHP 7.0+

Security History

8 known vulnerabilities, all patched

2 High 6 Medium

Most recent: August 25, 2026

View details ▸

Geo Controller <= 8.9.8 - Unauthenticated PHP Object Injection High

August 25, 2026 Patched in ["8.9.9"] CVE-2026-78286

Geo Controller <= 8.9.5 - Unauthenticated Information Exposure Medium

December 8, 2025 Patched in ["8.9.6"] CVE-2025-62109

Geo Controller <= 8.7.3 - Missing Authorization to Authenticated (Subscriber+) Menu Creation/Deletion Medium

September 4, 2024 Patched in ["8.7.4"] CVE-2024-7380

Geo Controller <= 8.6.9 - Missing Authorization to Unauthenticated Shortcode Execution Medium

September 4, 2024 Patched in ["8.7.0"] CVE-2024-7381

Geo Controller <= 8.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

March 28, 2024 Patched in ["8.6.5"] CVE-2024-30451

Geo Controller <= 8.6.4 - Unauthenticated PHP Object Injection via shortcode REST API Route High

February 10, 2024 Patched in ["8.6.5"] CVE-2024-3591

Geo Controller <= 8.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

October 4, 2023 Patched in ["8.5.3"] CVE-2023-51513

WordPress Geolocation Plugin – CF Geo Plugin <= 7.13.11 - Reflected Cross-Site Scripting Medium

August 31, 2021 Patched in ["7.13.12"]

What It Does

Geo Controller (CF GeoPlugin) detects the geographic location of visitors to your WordPress site and lets you tailor content, redirects, or restrictions based on country, region, or city. It provides shortcodes and conditional logic so you can serve location-specific pages, blocks, or notices without writing custom code.

Who It's For

This plugin is best suited for site owners running region-specific content, affiliate redirects, multi-country stores, or compliance-driven notice bars (such as GDPR or cookie consent per region). It is a good fit for small to mid-sized operations that need location targeting but do not want to subscribe to a paid geolocation SaaS.

Who Should Skip It

If you only need a static 'choose your country' dropdown or if your hosting already serves a single country, this plugin adds unnecessary database and API overhead. Larger enterprises with existing CDN-level geo routing should look at edge solutions instead.

The Bottom Line

Geo Controller delivers above-average quality with a clear geolocation use case, recent updates, and good user ratings, but its lack of any public support activity is a real risk if you run into trouble. For most small and mid-sized sites that want simple visitor-based content logic, it is a solid choice; for mission-critical deployments, factor in the support gap.

Pick this instead if your only location-based need is adding structured local business data for SEO rather than detecting and reacting to live visitor geolocation.