Lucene search
+L

55 matches found

Vulnrichment
Vulnrichment
added 2023/05/24 4:5 p.m.10 views

CVE-2022-47446 WordPress Store Locator Plugin <= 3.98.7 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Viadat Creations Store Locator for WordPress with Google Maps – LotsOfLocales plugin = 3.98.7 versions...

5.4CVSS8.9AI score0.00269EPSS
Exploits0References1
NVD
NVD
added 2023/03/15 11:15 a.m.20 views

CVE-2023-25709

Cross-Site Request Forgery CSRF vulnerability in Plainware Locatoraid Store Locator plugin = 3.9.11 versions...

8.8CVSS6.5AI score0.00248EPSS
Exploits0References1
OSV
OSV
added 2023/03/15 11:15 a.m.4 views

CVE-2023-25709

Cross-Site Request Forgery CSRF vulnerability in Plainware Locatoraid Store Locator plugin = 3.9.11 versions...

8.8CVSS7.3AI score0.00248EPSS
Exploits0References1
Patchstack
Patchstack
added 2023/03/14 12:0 a.m.14 views

WordPress Store Locator Plugin <= 3.98.7 is vulnerable to Cross Site Request Forgery (CSRF)

Software Store Locator Type Plugin Vulnerable versions = 3.98.7 Fixed in 3.98.8 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2022-47446 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 403399253298 Credits rezaduty Required...

8.8CVSS6.6AI score0.00269EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2022/11/18 11:15 p.m.18 views

CVE-2022-41615

Cross-Site Scripting XSS via Cross-Site Request Forgery CSRF vulnerability in Store Locator plugin = 1.4.5 on WordPress...

6.1CVSS0.00227EPSS
Exploits0References2
OSV
OSV
added 2022/11/18 11:15 p.m.1 views

CVE-2022-41615

Cross-Site Scripting XSS via Cross-Site Request Forgery CSRF vulnerability in Store Locator plugin = 1.4.5 on WordPress...

6.1CVSS5.8AI score0.00227EPSS
Exploits0References2
Cvelist
Cvelist
added 2022/11/18 10:28 p.m.23 views

CVE-2022-41615 WordPress Store Locator plugin <= 1.4.5 - Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Scripting XSS via Cross-Site Request Forgery CSRF vulnerability in Store Locator plugin = 1.4.5 on WordPress...

6.1CVSS6.5AI score0.00227EPSS
Exploits0References2
CVE
CVE
added 2022/11/18 10:28 p.m.60 views

CVE-2022-41615

The CVE concerns the WordPress Store Locator plugin (versions

6.1CVSS6.3AI score0.00227EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2022/11/18 12:0 a.m.9 views

WordPress plugin Store Locator 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

6.1CVSS6AI score0.00227EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2022/09/28 7:25 p.m.4 views

CVE-2022-41615

Cross-Site Scripting XSS via Cross-Site Request Forgery CSRF vulnerability in Store Locator plugin = 1.4.5 on WordPress...

6.1CVSS6.4AI score0.00227EPSS
Exploits0References3Affected Software1
CVE
CVE
added 2022/09/06 5:18 p.m.73 views

CVE-2022-2434

The CVE-2022-2434 entry affects the WordPress String Locator plugin (versions up to and including 2.5.0). The underlying issue is deserialization of untrusted input via the string-locator-path parameter, which can allow a PHAR-based call to arbitrary PHP objects when an action is triggered (e.g.,...

8.8CVSS8.6AI score0.01279EPSS
Exploits0References4Affected Software1
CNVD
CNVD
added 2022/03/30 12:0 a.m.13 views

WordPress String locator plugin路径遍历漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. WordPress plugin is a WordPress open source application plugin. WordPress String locator plugin version 2.5.0 before the path traversal vulnerability, the vulnerability is derived from String locato...

4.9CVSS2.7AI score0.0136EPSS
Exploits1References1
NVD
NVD
added 2017/10/16 3:29 p.m.10 views

CVE-2014-8621

SQL injection vulnerability in the Store Locator plugin 2.3 through 3.11 for WordPress allows remote attackers to execute arbitrary SQL commands via the slcustomfield parameter to sl-xml.php...

9.8CVSS10AI score0.02993EPSS
Exploits1References2
Prion
Prion
added 2017/10/16 3:29 p.m.12 views

Sql injection

SQL injection vulnerability in the Store Locator plugin 2.3 through 3.11 for WordPress allows remote attackers to execute arbitrary SQL commands via the slcustomfield parameter to sl-xml.php...

7.5CVSS9.2AI score0.02993EPSS
Exploits1References2Affected Software1
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.40 views

Wordpress Google Maps via Store Locator Plugin 2.7.1 - 3.0.1 - Multiple Vulnerabilities

No description provided by source. Description : Wordpress Plugins - Google Maps via Store Locator Plus Multiple Vulnerability Version : 2.7.1 - 3.0.1 Link : http://wordpress.org/extend/plugins/store-locator-le/ Plugins : http://downloads.wordpress.org/plugin/store-locator-le.3.0.1.zip Date :...

7.1AI score
Exploits0
Rows per page
Query Builder