Instawp String Locator
3 CVEs affecting Instawp String Locator. Latest disclosed: 2025-01-21. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-10936 | High | 8.8 | 2025-01-21 | The String locator plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.6.6 via deserialization of untrusted inpu… |
CVE-2022-2434 | High | 8.8 | 2022-09-06 | The String Locator plugin for WordPress is vulnerable to deserialization of untrusted input via the 'string-locator-path' parameter in versions up to, and incl… |
CVE-2023-6987 | Medium | 6.1 | 2024-08-24 | The String locator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'sql-column' parameter in all versions up to, and including, 2… |