Vulnerabilities

TI-2025-23682 CVE-2025-32617 · GHSA-hv83-7234-xwv7

WordPress Multiple Location Google Map plugin <= 1.1 - CSRF to Stored XSS vulnerability

LOW 31

Cross-Site Request Forgery (CSRF) vulnerability in Ydesignservices Multiple Location Google Map multiple-location-google-map allows Stored XSS.This issue affects Multiple Location Google Map: from n/a through <= 1.1.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00193 Published 2025-04-09 No fix listed CWE-352

TI-2024-37021 CVE-2024-55985 · GHSA-7hfg-gh8m-8f4x

WordPress YDS Support Ticket System plugin <= 1.0 - SQL Injection vulnerability

LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ydesignservices YDS Support Ticket System yds-support-ticket-system allows SQL Injection.This issue affects YDS Suppor…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00487 Published 2024-12-18 No fix listed CWE-89

TI-2022-16727 CVE-2022-36388 · GHSA-6859-c7gv-hqq5

WordPress YDS Support Ticket System plugin <= 1.0 - Cross-Site Request Forgery (CSRF) vulnerability

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in YDS Support Ticket System plugin <= 1.0 at WordPress.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00392 Published 2022-09-23 No fix listed CWE-352

Vulnerabilities

Filters

WordPress Multiple Location Google Map plugin <= 1.1 - CSRF to Stored XSS vulnerability

WordPress YDS Support Ticket System plugin <= 1.0 - SQL Injection vulnerability

WordPress YDS Support Ticket System plugin <= 1.0 - Cross-Site Request Forgery (CSRF) vulnerability