CVE Browser

Location Manager <= 2.3.38 - Unauthenticated SQL Injection via 'latitude' and 'longitude' REST API Parameters

WordPress Restaurante theme <= 3.0.7 - Cross Site Scripting (XSS) vulnerability

GeoDirectory < 2.8.120 - Contributor+ Stored XSS

WordPress Ketchup Shortcodes Plugin <= 0.1.2 - Cross Site Scripting (XSS) vulnerability

Ketchup Shortcodes <= 0.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

WordPress GeoDirectory plugin <= 2.3.84 - Cross Site Scripting (XSS) vulnerability

WordPress AyeCode Connect plugin <= 1.3.8 - Broken Access Control vulnerability

WordPress UsersWP plugin <= 1.2.15 - Broken Access Control vulnerability

WordPress GetPaid plugin <= 2.8.11 - Broken Access Control vulnerability

WordPress GeoDirectory plugin <= 2.3.70 - Broken Access Control vulnerability

WordPress GeoDirectory plugin <= 2.3.80 - Cross Site Scripting (XSS) vulnerability

WordPress GeoDirectory plugin <= 2.3.61 - SQL Injection vulnerability

UsersWP < 1.2.12 - Users Information Disclosure

UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress <= 1.2.10 - Unauthenticated SQL Injection via 'uwp_sor…

GeoDirectory – WordPress Business Directory Plugin, or Classified Directory <= 2.3.48 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'gd_single…

WordPress UsersWP plugin < 1.2.6 - Cross Site Request Forgery (CSRF) vulnerability

UsersWP <= 1.2.6 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode

WordPress GeoDirectory Plugin <= 2.3.28 is vulnerable to SQL Injection

WordPress UsersWP Plugin <= 1.2.3.9 is vulnerable to CSV Injection

Multiple Themes - Reflected XSS

GeoDirectory < 2.2.22 - Contributor+ Stored XSS via Shortcode

WordPress API KEY for Google Maps plugin <= 1.2.1 - CSRF vulnerability leading to Google Maps API key update

UsersWP < 1.2.3.1 - Subscriber+ User Avatar Override

GeoDirectory < 2.1.1.3 - Authenticated Stored Cross-Site Scripting (XSS)

GetPaid < 2.3.4 - Authenticated Stored XSS