Vulnerability index

Browse CVEs

5 matching

Cards Compact

Filters 1 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

HIGH 7.1 CVE-2024-13571 The Post Timeline WordPress plugin before 2.3.10 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflect…

Post Timeline 2.3.10+ Fix from $1,9502025-02-26 MEDIUM 6.1 CVE-2023-4151 The Store Locator WordPress plugin before 1.4.13 does not sanitise and escape an invalid nonce before outputting it back in an AJAX response, leading…

Store Locator 1.4.13+ Fix from $1,6002023-09-04 MEDIUM 6.1 CVE-2023-4284 The Post Timeline WordPress plugin before 2.2.6 does not sanitise and escape an invalid nonce before outputting it back in an AJAX response, leading …

Post Timeline 2.2.6+ Fix from $1,6002023-09-04 MEDIUM 5.4 CVE-2022-4832 The Store Locator WordPress plugin before 1.4.9 does not validate and escape some of its shortcode attributes before outputting them back in the page…

Store Locator 1.4.9+ Fix from $1,6002023-01-23 MEDIUM 6.1 CVE-2022-41615 Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerability in Store Locator plugin <= 1.4.5 on WordPress.

Store Locator 1.4.6+ Fix from $1,6002022-11-18