ghuger

Records14All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

ghuger records in CISA KEV

No ghuger vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Locations · all components

TI-2021-03251 CVE-2021-4394 · GHSA-gp2m-p45c-8rv4

MEDIUM 55

The Locations plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.2.1.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00464 Published 2023-07-01 No fix listed CWE-352

TI-2023-22197 CVE-2023-41797 · GHSA-3f66-mr9x-qch8

LOW 29

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Gold Plugins Locations plugin <= 4.0 versions.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00385 Published 2023-10-02 No fix listed CWE-79