Login Request a demo
SL
Product
String locator
by instawp · last CVE Jan 21, 2025
3
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 0High 2Medium 1Low 0
Severity
All severities3Critical0High2Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add String locator to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-10936
8.8
1%
Jan 21
String Locator <= 2.6.6 - Unauthenticated PHP Object Injection
Affected: through 2.6.6
CVE-2022-2434
8.8
2%
Sep 6
The String Locator plugin for WordPress is vulnerable to deserialization of untrusted input via the 'string-locator-path' parameter in versions up to, and including 2.5.0
Affected: through 2.5.0
CVE-2023-6987
6.1
0%
Aug 24
String Locator <= 2.6.5 - Reflected Cross-Site Scripting
Affected: through 2.6.5
Showing 3