Skip to content
OpenAdvisories

Product · richardgabriel

Locations

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2021-4394

    Locations <= 3.2.1 - Cross-Site Request Forgery Bypass

    The Locations plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.2.1. This is due to missing or incorrect nonce validation on the saveCustomFields() function. This makes it possible for unauthenticated attacke…

    richardgabriel Locations Web / CMS