PatchTheCVEgoto vulnerabilities and fixes
Recent CVEs affecting goto, with upgrade or downgrade steps. 3 tracked.
goto has 3 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 3. Most recent: 2021-05-24. Highest priority: CVE-2021-24314 (score 64/100).
- CVE-2021-24314 CRITICAL 9.8 UPGRADE The Goto WordPress theme before 2.1 did not sanitise, validate of escape the keywords GET parameter from its l
- CVE-2021-24297 MEDIUM 6.1 UPGRADE The Goto WordPress theme before 2.1 did not properly sanitize the formvalue JSON POST parameter in its tl_filt
- CVE-2021-24235 MEDIUM 6.1 UPGRADE The Goto WordPress theme before 2.0 does not sanitise the keywords and start_date GET parameter on its Tour Li
FAQ
How do I fix goto vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is goto being exploited right now?
None of the tracked goto CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which goto CVE should I patch first?
CVE-2021-24314 currently ranks highest (64/100): The Goto WordPress theme before 2.1 did not sanitise, validate of escape the keywords GET parameter from its l.