CVE Intelligence

GoodLayers vulnerabilities

🔔 Create alert RSS

Published CVEs affecting GoodLayers products: 3 record(s), with severity, exploitation and fixes.

Tourmaster 2Goodlayers Core 1

Exploited only (KEV) →

CVE-2026-28166 High · 7.1 CWE-79 Aug 24, 2026
WordPress Tourmaster plugin <= 5.4.9 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in Tourmaster <= 5.4.9 versions.
CVE-2025-69133 High · 7.5 CWE-98 Jul 2, 2026
WordPress Tourmaster plugin <= 5.4.5 - Local File Inclusion vulnerability
Subscriber Local File Inclusion in Tourmaster <= 5.4.5 versions.
CVE-2025-59580 High · 8.8 CWE-266 Oct 22, 2025
WordPress Goodlayers Core plugin < 2.1.7 - Privilege Escalation vulnerability
Incorrect Privilege Assignment vulnerability in GoodLayers Goodlayers Core goodlayers-core allows Privilege Escalation.This issue affects Goodlayers Core: from n/a through < 2.1.7.