plainware

9 results · Clear filters · Feed

• Medium 5.9
  CVE-2025-62140

  WordPress Locatoraid Store Locator plugin <= 3.9.68 - Cross Site Scripting (XSS) vulnerability

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in plainware Locatoraid Store Locator locatoraid allows Stored XSS.This issue affects Locatoraid Store Locator: from n/a through <= 3.9.68.

  plainware Locatoraid Store Locator
  Dec 31, 2025
• Medium 6.1
  CVE-2024-9652

  Locatoraid Store Locator <= 3.9.47 - Reflected Cross-Site Scripting

  The Locatoraid Store Locator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via $_POST keys in all versions up to, and including, 3.9.47 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticat…

  plainware Locatoraid Store Locator Web / CMS
  Oct 16, 2024
• Medium 5.9
  CVE-2024-44040

  WordPress ShiftController Employee Shift Scheduling plugin <= 4.9.64 - Cross Site Scripting (XSS) vulnerability

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in plainware ShiftController Employee Shift Scheduling shiftcontroller allows Stored XSS.This issue affects ShiftController Employee Shift Scheduling: from n/a …

  plainware ShiftController Employee Shift Scheduling
  Oct 6, 2024
• Medium 6.1
  CVE-2024-9435

  ShiftController Employee Shift Scheduling <= 4.9.66 - Reflected Cross-Site Scripting

  The ShiftController Employee Shift Scheduling plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URL keys in all versions up to, and including, 4.9.66 due to insufficient input sanitization and output escaping. This makes it possible for…

  plainware ShiftController Employee Shift Scheduling Web / CMS
  Oct 4, 2024
• Medium 5.9
  CVE-2024-30181

  WordPress Locatoraid Store Locator plugin <= 3.9.30 - Cross Site Scripting (XSS) vulnerability

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Plainware Locatoraid Store Locator allows Stored XSS.This issue affects Locatoraid Store Locator: from n/a through 3.9.30.

  plainware Locatoraid Store Locator
  Mar 27, 2024
• Medium 6.5
  CVE-2023-32576

  WordPress Locatoraid Store Locator Plugin <= 3.9.18 is vulnerable to Cross Site Scripting (XSS)

  Auth. (subscriber+) Stored Cross-Site Scripting') vulnerability in Plainware Locatoraid Store Locator plugin <= 3.9.18 versions.

  plainware Locatoraid Store Locator
  Aug 25, 2023
• Medium 5.4
  CVE-2023-2031

  Locatoraid Store Locator <= 3.9.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

  The Locatoraid Store Locator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in versions up to, and including, 3.9.14 due to insufficient input sanitization and output escaping on user supplied attributes. This …

  plainware Locatoraid Store Locator Web / CMS
  Jun 9, 2023
• Medium 6.1
  CVE-2023-1978

  ShiftController Employee Shift Scheduling <= 4.9.25 - Reflected Cross-Site Scripting via Query String

  The ShiftController Employee Shift Scheduling plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the query string in versions up to, and including, 4.9.25 due to insufficient input sanitization and output escaping. This makes it possible…

  plainware ShiftController Employee Shift Scheduling Web / CMS
  Jun 9, 2023
• Medium 5.4
  CVE-2023-25709

  WordPress Locatoraid Store Locator Plugin <= 3.9.11 is vulnerable to Cross Site Request Forgery (CSRF)

  Cross-Site Request Forgery (CSRF) vulnerability in Plainware Locatoraid Store Locator plugin <= 3.9.11 versions.

  plainware Locatoraid Store Locator
  Mar 15, 2023