Dotsquares vulnerabilities

Products

• contact form 7 math captcha 1
• google map locations 1
• WP Custom Post Template 1

Latest Dotsquares CVEs

Newest publication first

1. CVE-2024-49606 WordPress Google Map Locations plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

   Published 2024-10-20

   Medium·CVSS 6.1 EPSS 0.29%

   Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DotsquaresLtd Google Map Locations google-map-locations allows Reflected XSS.This issue affects Google Map Locations: from n/a through <= 1.0.

2. CVE-2024-6517 Contact Form 7 Math Captcha <= 2.0.1 - Reflected XSS

   Published 2024-09-26

   Medium·CVSS 6.1 EPSS 0.71%

   The Contact Form 7 Math Captcha WordPress plugin through 2.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users.

3. CVE-2023-41851 WordPress WP Custom Post Template Plugin <= 1.0 is vulnerable to Cross Site Request Forgery (CSRF)

   Published 2023-10-10

   High·CVSS 8.8 EPSS 0.26%

   Cross-Site Request Forgery (CSRF) vulnerability in Dotsquares WP Custom Post Template <= 1.0 versions.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.