36 matches found
CVE-2023-32576
Auth. subscriber+ Stored Cross-Site Scripting' vulnerability in Plainware Locatoraid Store Locator plugin = 3.9.18 versions...
Cross site scripting
Auth. subscriber+ Stored Cross-Site Scripting' vulnerability in Plainware Locatoraid Store Locator plugin = 3.9.18 versions...
CVE-2023-32576
CVE-2023-32576 affects the WordPress plugin Locatoraid Store Locator (Locatoraid) up to version 3.9.18. The issue is a Stored Cross-Site Scripting (XSS) vulnerability that requires Subscriber privileges to exploit. PatchStack confirms the fix was released in version 3.9.19. Public references also...
CVE-2023-32576 WordPress Locatoraid Store Locator Plugin <= 3.9.18 is vulnerable to Cross Site Scripting (XSS)
Auth. subscriber+ Stored Cross-Site Scripting' vulnerability in Plainware Locatoraid Store Locator plugin = 3.9.18 versions...
CVE-2023-29424
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Plainware ShiftController Employee Shift Scheduling plugin = 4.9.23 versions...
CVE-2023-29424
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Plainware ShiftController Employee Shift Scheduling plugin = 4.9.23 versions...
Cross site scripting
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Plainware ShiftController Employee Shift Scheduling plugin = 4.9.23 versions...
CVE-2023-29424
The CVE-2023-29424 entry concerns the WordPress ShiftController Employee Shift Scheduling plugin (versions
PT-2023-22251 · Plainware · Plainware Shiftcontroller Employee Shift Scheduling
Name of the Vulnerable Software and Affected Versions: Plainware ShiftController Employee Shift Scheduling plugin versions = 4.9.23 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. This vulnerability affects...
CVE-2023-25709
Cross-Site Request Forgery CSRF vulnerability in Plainware Locatoraid Store Locator plugin = 3.9.11 versions...
CVE-2023-25709
Cross-Site Request Forgery CSRF vulnerability in Plainware Locatoraid Store Locator plugin = 3.9.11 versions...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in Plainware Locatoraid Store Locator plugin = 3.9.11 versions...
CVE-2023-25709 WordPress Locatoraid Store Locator Plugin <= 3.9.11 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Plainware Locatoraid Store Locator plugin = 3.9.11 versions...
CVE-2023-25709
CVE-2023-25709 is a CSRF vulnerability in the WordPress plugin Locatoraid Store Locator (Plainware) <= 3.9.11. The entry shows a high impact according to NVD CVSS: CVSS:3.1 base score 8.8 (HIGH) with network attack vector, user interaction required. Patch information from Patchstack indicates ...
CVE-2023-25709 WordPress Locatoraid Store Locator Plugin <= 3.9.11 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Plainware Locatoraid Store Locator plugin = 3.9.11 versions...
PT-2023-20262 · Plainware · Store Locator
Name of the Vulnerable Software and Affected Versions: Plainware Locatoraid Store Locator plugin versions = 3.9.11 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a we...