WordPress Goodlayers Core plugin < 2.1.7 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Bonds in WordPress Plugin Goodlayers Core versions 2.1.7...

CVE-2025-53342

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GoodLayers Modernize modernize allows Stored XSS.This issue affects Modernize: from n/a through = 3.4.0...

CVE-2025-53343

Missing Authorization vulnerability in GoodLayers Modernize modernize allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Modernize: from n/a through = 3.4.0...

CVE-2025-53343

Missing Authorization vulnerability in GoodLayers Modernize modernize allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Modernize: from n/a through = 3.4.0...

CVE-2025-53342

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GoodLayers Modernize modernize allows Stored XSS.This issue affects Modernize: from n/a through = 3.4.0...

CVE-2025-53342 WordPress Modernize Theme <= 3.4.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GoodLayers Modernize modernize allows Stored XSS.This issue affects Modernize: from n/a through = 3.4.0...

CVE-2025-53342

CVE-2025-53342 is a stored XSS vulnerability in GoodLayers Modernize theme (affected: versions up to and including 3.4.0). The issue arises from improper neutralization of input during web page generation, enabling stored cross-site scripting. Public sources in the connected documents corroborate...

CVE-2025-53343

CVE-2025-53343 refers to a Missing Authorization vulnerability in the GoodLayers Modernize WordPress theme, affecting versions up to 3.4.0. The root cause is misconfigured access control security levels (broken authorization). Public sources indicate no patch is available (patch status listed as ...

CVE-2025-53343 WordPress Modernize Theme <= 3.4.0 - Broken Access Control Vulnerability

Missing Authorization vulnerability in GoodLayers Modernize modernize allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Modernize: from n/a through = 3.4.0...

PT-2025-33373 · Goodlayers · Goodlayers Modernize

Name of the Vulnerable Software and Affected Versions: GoodLayers Modernize versions through 3.4.0 Description: GoodLayers Modernize is susceptible to a cross-site scripting XSS issue due to improper neutralization of input during web page generation. The vulnerability allows for stored XSS...

PT-2025-33374 · Unknown · Goodlayers Modernize

Name of the Vulnerable Software and Affected Versions: GoodLayers Modernize versions through 3.4.0 Description: The software contains a missing authorization flaw that allows exploitation due to incorrectly configured access control security levels. Recommendations: Update GoodLayers Modernize to...

CVE-2025-39503

Deserialization of Untrusted Data vulnerability in GoodLayers Goodlayers Hotel gdlr-hotel allows Object Injection.This issue affects Goodlayers Hotel: from n/a through = 3.1.4...

CVE-2025-39505

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GoodLayers Goodlayers Hotel gdlr-hotel allows Reflected XSS.This issue affects Goodlayers Hotel: from n/a through = 3.1.4...

CVE-2025-48292

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in GoodLayers Tourmaster tourmaster allows PHP Local File Inclusion.This issue affects Tourmaster: from n/a through = 5.3.8...

CVE-2025-39501

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in GoodLayers Goodlayers Hostel gdlr-hostel allows Blind SQL Injection.This issue affects Goodlayers Hostel: from n/a through = 3.1.4...

CVE-2025-39504

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in GoodLayers Goodlayers Hotel gdlr-hotel allows Blind SQL Injection.This issue affects Goodlayers Hotel: from n/a through = 3.1.4...

CVE-2025-39502

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GoodLayers Goodlayers Hostel gdlr-hostel allows Reflected XSS.This issue affects Goodlayers Hostel: from n/a through = 3.1.2...

CVE-2025-39500

Deserialization of Untrusted Data vulnerability in GoodLayers Goodlayers Hostel gdlr-hostel allows Object Injection.This issue affects Goodlayers Hostel: from n/a through = 3.1.2...

CVE-2025-48292

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in GoodLayers Tourmaster tourmaster allows PHP Local File Inclusion.This issue affects Tourmaster: from n/a through = 5.3.8...

CVE-2025-39505

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GoodLayers Goodlayers Hotel gdlr-hotel allows Reflected XSS.This issue affects Goodlayers Hotel: from n/a through = 3.1.4...