Security vulnerability

Same issue here, WPToolkit Shows
WordPress Weather Atlas Widget plugin <= 3.0.1 – Cross Site Scripting (XSS) vulnerability
Cross Site Scripting (XSS) vulnerability discovered by LVT-tholv2k (Patchstack Alliance) in WordPress Plugin Weather Atlas Widget (versions <= 3.0.1)
Date:?18.11.2024?|?Source:?https://patchstack.com/database/vulnerability/weather-atlas/wordpress-weather-atlas-widget-plugin-3-0-1-cross-site-scripting-xss-vulnerability?_a_id=110

I Disabled the plugin, I will wait a couple of days and if there is no patch or version update I will try to find where vulnerabillity is and update it myown or I will change the plugin with another one, its a pitty This is a very nice plugin.

Thank you for the heads-up.

We will most definitely try to identify the vulnerability. If/When we find the issue, we will fix it, hopefully before it is announced on the mentioned website. If it is published, we will address it promptly.

Thx again

@weatheratlas thanks for the update.

dj