cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,poc,trended,trended_no_1,published,trended_score
CVE-2024-12571,https://securityvulnerability.io/vulnerability/CVE-2024-12571,Local File Inclusion Vulnerability in LotsOfLocales Plugin for WordPress,"The LotsOfLocales plugin for WordPress, specifically version 3.98.9, is impacted by a Local File Inclusion (LFI) vulnerability. This security flaw exists due to improper validation of the 'sl_engine' parameter, allowing unauthenticated attackers to include arbitrary files hosted on the server. Exploiting this vulnerability could lead to the execution of malicious PHP code, thereby bypassing access controls, accessing sensitive data, or even executing arbitrary code through uploaded files disguised as ‘safe’ formats like images.",Wordpress,Store Locator For WordPress With Google Maps – Lotsoflocales,9.8,CRITICAL,0.000910000002477318,false,,false,false,false,,false,false,2024-12-20T06:59:06.242Z,0
CVE-2022-47446,https://securityvulnerability.io/vulnerability/CVE-2022-47446,WordPress Store Locator Plugin <= 3.98.7 is vulnerable to Cross Site Request Forgery (CSRF),Cross-Site Request Forgery (CSRF) vulnerability in Viadat Creations Store Locator for WordPress with Google Maps – LotsOfLocales plugin <= 3.98.7 versions.,Wordpress,Store Locator For WordPress With Google Maps – Lotsoflocales,5.4,MEDIUM,0.000859999970998615,false,,false,false,false,,false,false,2023-05-24T16:05:31.188Z,0