Skip to content
OpenAdvisories

Vendor

GoodLayers

16 known vulnerabilities.

Products

Tourmaster 4 Goodlayers Hotel 3 Goodlayers Hostel 3 Modernize 2 Goodlayers Core 2 Goodlayers Blocks 1 Tour Master - Tour Booking, Travel, Hotel 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.5
    CVE-2025-53342

    WordPress Modernize Theme <= 3.4.0 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GoodLayers Modernize modernize allows Stored XSS.This issue affects Modernize: from n/a through <= 3.4.0.

    GoodLayers Modernize
  • Medium 4.3
    CVE-2025-53343

    WordPress Modernize Theme <= 3.4.0 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in GoodLayers Modernize modernize allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Modernize: from n/a through <= 3.4.0.

    GoodLayers Modernize
  • Medium 6.5
    CVE-2024-13369

    Tour Master - Tour Booking, Travel, Hotel <= 5.3.7 - Authenticated (Subscriber+) SQL Injection via review_id Parameter

    The Tour Master - Tour Booking, Travel, Hotel plugin for WordPress is vulnerable to time-based SQL Injection via the ‘review_id’ parameter in all versions up to, and including, 5.3.7 due to insufficient escaping on the user supplied parameter and lack of suff…

    GoodLayers Tour Master - Tour Booking, Travel, Hotel Web / CMS
  • Medium 6.1
    CVE-2024-11200

    Goodlayers Core <= 2.0.7 - Reflected Cross-Site Scripting via 'font-family'

    The Goodlayers Core plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘font-family’ parameter in all versions up to, and including, 2.0.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthe…

    GoodLayers Goodlayers Core Web / CMS