Plainware Locatoraid
3 CVEs affecting Plainware Locatoraid. Latest disclosed: 2023-09-25. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-4476 | Medium | 6.1 | 2023-09-25 | The Locatoraid Store Locator WordPress plugin before 3.9.24 does not sanitise and escape the lpr-search parameter before outputting it back in the page, leadin… |
CVE-2023-2031 | Medium | 5.4 | 2023-06-09 | The Locatoraid Store Locator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in versions up to, and including… |
CVE-2023-25709 | Medium | 5.4 | 2023-03-15 | Cross-Site Request Forgery (CSRF) vulnerability in Plainware Locatoraid Store Locator plugin <= 3.9.11 versions. |