Log out
Get PRO

Latest

Input validation vulnerability in Location Weather 1.3.3

  • Severity: medium-risk
  • Status: Fixed
  • Publication: January 18, 2023

The Location Weather plugin for WordPress is not secure in versions up to 1.3.3. This means that someone with access to the plugin could add malicious code to pages of the website. When a user visits a page with the malicious code

Detected in:

Location Weather – Best weather forecast widget plugin for WordPress fixed vulnerable versions:
Location Weather – Hourly, Daily Weather Forecast Widget and Weather Map fixed vulnerable versions:
Location Weather – WordPress Weather Forecast, AQI, Temperature and Weather Widget fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.