Locations

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-41797 Oct 02, 09:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Locations Goldplugins

NVD

CVSS 3.1

5.4

EPSS

0.3%

CVE-2021-4394 Jul 01, 05:15 MEDIUM POC PATCH This Month

The Locations plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.2.1. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

WordPress CSRF Locations Wordpress Plugin Goldplugins

NVD VulDB

CVSS 3.1

4.3

EPSS

0.2%

CVE-2023-41797

EPSS 0% CVSS 5.4

MEDIUM This Month

Auth. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Locations Goldplugins

NVD

CVE-2021-4394

EPSS 0% CVSS 4.3

MEDIUM POC PATCH This Month

WordPress CSRF Locations +2

NVD VulDB