WordPress security by component

Goto

Theme description

Goto is a WordPress component with 3 published CVE records in this archive. The latest tracked vulnerability was published May 24, 2021; the highest CVE/CNA score is 9.8.

Theme slug: goto

Latest vulnerability

CVE-2021-24297: Goto: Cross-site scripting

Goto is affected by cross-site scripting. The vulnerable path is reachable without authentication. Injected script can execute in the affected site's origin when the vulnerable output is viewed.

PublishedMay 24, 2021

Safe version guidanceSee mitigation notes

		Safe version
May 24, 2021	CVE-2021-24297 Goto: Cross-site scripting Goto is affected by cross-site scripting. The vulnerable path is reachable without authentication. Injected script can execute in the affected site's origin when the vulnerable output is viewed.	See mitigation notes	CVE6.1 NVD6.1
May 17, 2021	CVE-2021-24314 Goto: SQL injection Goto is affected by SQL injection. The vulnerable path is reachable without authentication. A successful request can alter database queries and expose or modify WordPress data.	See mitigation notes	CVE9.8 NVD9.8
Apr 22, 2021	CVE-2021-24235 Goto: Cross-site scripting Goto is affected by cross-site scripting. The vulnerable path is reachable without authentication. Injected script can execute in the affected site's origin when the vulnerable output is viewed.	See mitigation notes	CVE6.1 NVD6.1