Findgo Vulnerabilities

The Findgo - Directory Listing WordPress Theme theme for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.57. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to perform an unauthorized action granted...

CVSS:

4.3

Affected:

up to 1.3.57

Fixed in:

1.3.58

Disclosed:

Aug 14, 2025

CVE-2025-53587 on NVD →

Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability discovered by m0ze in WordPress Findgo premium theme (versions <= 1.3.30).

Affected:

up to 1.3.32

Fixed in:

1.3.32

Disclosed:

Jul 13, 2020

Authenticated Stored Cross-Site Scripting (XSS) vulnerability discovered by m0ze in WordPress Findgo premium theme (versions <= 1.3.30).

Affected:

up to 1.3.32

Fixed in:

1.3.32

Disclosed:

Jul 13, 2020

The Findgo theme for WordPress is vulnerable to Cross-Site Scripting in versions before 1.3.32 due to insufficient input sanitization and output escaping. This makes it possible for attackers to inject arbitrary web scripts that execute in a victim's browser.

CVSS:

7.1

Affected:

up to 1.3.32

Fixed in:

1.3.32

Disclosed:

Jun 17, 2020

The Findgo theme for WordPress is vulnerable to Cross-Site Scripting in versions before 1.3.32 due to insufficient input sanitization and output escaping. This makes it possible for attackers to inject arbitrary web scripts that execute in a victim's browser.

Affected:

up to 1.3.32

Fixed in:

1.3.32

Disclosed:

Jun 17, 2020

Multiple Cross-Site Scripting (XSS) vulnerabilities were discovered in the &laquo;Findgo - Directory Listing WordPress Theme&raquo;, tested version &mdash; v1.3.30.

Affected:

up to 1.3.32

Fixed in:

1.3.32