CVE-2026-7249
Published
CVSS v3
4.3
MEDIUM
CVSS v2
N/A
Affected
1
PROJECT
Description
The Location Weather plugin for WordPress is vulnerable to unauthorized modification of data due to missing capability checks on the `splw_update_block_options()` and `lwp_clean_weather_transients()` functions in all versions up to, and including, 3.0.2. This makes it possible for authenticated attackers, with Contributor-level access and above, to disable all weather blocks and purge all weather cache transients. The nonce required for these actions is exposed to all authenticated users via `wp_localize_script()` on the `init` hook.
<h3>All-in-One WordPress Weather Forecast Solution</h3>
<p><a href="https://locationweather.io/" rel="nofollow ugc"><strong>Location Weather</strong></a> is a powerful, easy-to-use weather plugin for WordPress that lets you display accurate, real-time weather for any location worldwide. With <a href="https://locationweather.io/patterns/" rel="nofollow ugc"><strong>200+ Ready Weather Patterns</strong></a> and <a href="https://locationweather.io/blocks/" rel="nofollow ugc"><strong>15+ Gutenberg Weather Blocks</strong></a> (Free & Pro), you can add a beautiful WordPress weather widget to any page in minutes — no coding required.</p>
<p>Whether you need a simple current weather widget, a detailed weather forecast widget, a live weather map for WordPress, an Air Quality Index (AQI) display, Sun & Moon Times, or an AI Weather Assistant, Location Weather does it all from one <strong>lightweight</strong> and feature-rich plugin. The plugin is fully supported with different page builders like Elementor, Divi, and Classic Shortcodes.</p>
<p>Trusted by <strong>20,000+ happy users</strong> and <strong>130+ ⭐⭐⭐⭐⭐ Reviews & 4.9/5</strong> Happiness Rating on <a href="https://www.trustpilot.com/review/shapedplugin.com" rel="nofollow ugc"><strong>Trustpilot</strong></a>. Location Weather is the complete weather forecast plugin for travel sites, hotels, news portals, agriculture, events, real estate, and any WordPress site where weather matters.</p>
<p><span class="embed-youtube" style="text-align:center; display: block;"><iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/vLdIHhP4v-I?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent&listType=playlist&list=PLoUb-7uG-5jP_5pNrdBCKxgPrCp_rS89G" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe></span></p>
<p>🧩 <a href="https://locationweather.io/blocks/" rel="nofollow ugc"><strong>Weather Blocks</strong></a> | 🎨 <a href="https://locationweather.io/patterns/" rel="nofollow ugc"><strong>Ready Patterns</strong></a> | 📖 <a href="https://locationweather.io/docs/" rel="nofollow ugc"><strong>Documentation</strong></a> | 🛟 <a href="https://shapedplugin.com/create-new-ticket/" rel="nofollow ugc"><strong>Support</strong></a> | 🛣️ <a href="https://community.shapedplugin.com/roadmap/location-weather/" rel="nofollow ugc"><strong>Roadmap</strong></a> | 🏆 <a href="https://locationweather.io/pricing/?ref=1" rel="nofollow ugc"><strong>Upgrade to Pro!</strong></a></p>
<h3>Add a Weather Forecast in 3 Simple Steps</h3>
<p>You don’t need any technical skills to display a professional local weather forecast on your site. Just:</p>
<ol>
<li><strong>Add a weather API key</strong> – Get a free or paid key from <a href="https://home.openweathermap.org/api_keys" rel="nofollow ugc">OpenWeather</a> or <a href="https://www.weatherapi.com/signup.aspx" rel="nofollow ugc">WeatherAPI</a>. </li>
<li><strong>Choose a ready pattern or template</strong> – Pick from 200+ professionally designed <strong>weather templates</strong>. </li>
<li><strong>Customize visually and publish</strong> – Adjust colors, layout, and data, then embed via block, shortcode, or Elementor.</li>
</ol>
<p>Elementor, Divi, Gutenberg, or the Classic Editor – whatever your setup, Location Weather helps you add accurate, beautiful weather forecasts fast.</p>
<h3>Why Choose Location Weather?</h3>
<p>Location Weather is more than a simple current weather widget – it’s a complete weather forecast solution for WordPress that helps you increase engagement, reduce bounce rates, and support smarter buying and travel decisions:</p>
<ul>
<li><strong>All-in-one weather solution</strong> – Real-time weather, current temperature, forecasts, AQI, weather maps, historical data, sun & moon times, and an AI weather assistant, global weather search in a single plugin. </li>
<li><strong>No coding required</strong> – A visual editor and ready-made patterns mean anyone can build a stunning weather display. </li>
<li><strong>Beautiful weather widgets/templates</strong> – 40+ built-in customizable weather templates and 200+ ready weather patterns that look great on every device. </li>
<li><strong>Works everywhere</strong> – Native weather Gutenberg block, weather shortcode, and Elementor weather widget compatibility, plus Divi, WPBakery, Beaver Builder, and more. </li>
<li><strong>Multiple weather APIs supported</strong> – Connect OpenWeather and WeatherAPI for maximum reliability and flexibility. </li>
<li><strong>Lightweight & fast</strong> – Performance-optimized code that won’t slow your site down. </li>
<li><strong>Global coverage locations</strong> – 200,000+ cities across 238+ countries and territories, with <strong>weather by location</strong>, ZIP, city, or coordinates.</li>
</ul>
<h3>200+ Ready Weather Patterns & Templates</h3>
<p>Start fast with 200+ ready weather patterns and 40+ weather templates built for every style and mood. Every weather template is fully customizable – colors, typography, units, layouts, and 12+ weather icon packs – so your responsive weather widget always matches your brand.</p>
<p>The Weather Patterns Library covers every layout you need:</p>
<p>✅ <a href="https://locationweather.io/patterns/#vertical" rel="nofollow ugc">Weather Card Patterns</a><br />
✅ <a href="https://locationweather.io/patterns/#horizontal" rel="nofollow ugc">Weather Horizontal Patterns</a><br />
✅ <a href="https://locationweather.io/patterns/#aqi-minimal" rel="nofollow ugc">AQI – Minimal Card Patterns</a><br />
✅ <a href="https://locationweather.io/patterns/#aqi-detailed" rel="nofollow ugc">AQI – Detailed Air Quality Patterns</a><br />
✅ <a href="https://locationweather.io/patterns/#grid" rel="nofollow ugc">Weather Grid Patterns</a><br />
✅ <a href="https://locationweather.io/patterns/#tabs" rel="nofollow ugc">Weather Tabs Patterns</a><br />
✅ <a href="https://locationweather.io/patterns/#accordion" rel="nofollow ugc">Weather Accordion Patterns</a><br />
✅ <a href="https://locationweather.io/patterns/#table" rel="nofollow ugc">Weather Table Patterns</a><br />
✅ <a href="https://locationweather.io/patterns/#historical-weather" rel="nofollow ugc">Historical Weather Data Patterns</a><br />
✅ <a href="https://locationweather.io/patterns/#historical-aqi" rel="nofollow ugc">Historical Air Quality Data Patterns</a><br />
✅ <a href="https://locationweather.io/patterns/#sun-moon" rel="nofollow ugc">Sun & Moon Times Patterns</a><br />
✅ <a href="https://locationweather.io/patterns/#combined" rel="nofollow ugc">Detailed Forecast Patterns</a><br />
✅ <a href="https://locationweather.io/patterns/#windy-map" rel="nofollow ugc">Windy Radar Map Patterns</a><br />
✅ <a href="https://locationweather.io/patterns/#owm-map" rel="nofollow ugc">Weather Map Patterns</a><br />
✅ <a href="https://locationweather.io/patterns/#section-heading" rel="nofollow ugc">Section Heading Patterns</a></p>
<p>Each pattern in the Weather Patterns Library is fully customizable, so you can match your brand in a few clicks.</p>
<h3>15+ Powerful Gutenberg Weather Blocks</h3>
<p>Location Weather provides with a full library of Gutenberg weather blocks for WordPress, each with ready templates and deep customization:</p>
<ul>
<li><a href="https://locationweather.io/blocks/#demoId16" rel="nofollow ugc"><strong>Weather Card</strong></a> – Real-time weather in a clean vertical current weather widget layout. Perfect for travel, tourism, news, sports, and local business sites. </li>
<li><a href="https://locationweather.io/blocks/#demoId37" rel="nofollow ugc"><strong>Weather Horizontal</strong></a> – A sleek wide layout ideal for headers, sidebars, and landing pages. </li>
<li><a href="https://locationweather.io/blocks/#demoId38" rel="nofollow ugc"><strong>Weather Tabs</strong></a> – Organize current, hourly, daily, and map data into tidy interactive tabs. </li>
<li><a href="https://locationweather.io/blocks/#demoId39" rel="nofollow ugc"><strong>Weather Table</strong></a> – Display temperature, humidity, wind, pressure, and precipitation in a clear, responsive table. </li>
<li><a href="https://locationweather.io/blocks/#demoId41" rel="nofollow ugc"><strong>Weather Grid</strong></a> – Compare multiple forecast cards side by side in a modern grid. </li>
<li><a href="https://locationweather.io/blocks/#demoId40" rel="nofollow ugc"><strong>Weather Accordion</strong></a> <strong>(Pro)</strong> – Collapsible panels that keep multi-location or extended forecasts tidy. </li>
<li><a href="https://locationweather.io/blocks/#demoId42" rel="nofollow ugc"><strong>Weather Detailed Forecast</strong></a> <strong>(Pro)</strong> – Rich metrics including temperature trends, humidity, precipitation, wind, UV index, and sunrise/sunset. </li>
<li><a href="https://locationweather.io/blocks/#demoId47" rel="nofollow ugc"><strong>AQI – Minimal Card</strong></a> – Compact, elegant real-time Air Quality Index display. </li>
<li><a href="https://locationweather.io/blocks/#demoId46" rel="nofollow ugc"><strong>AQI – Detailed Air Quality</strong></a> <strong>(Pro)</strong> – Full air quality metrics, pollutant levels, status, and health advice. </li>
<li><a href="https://locationweather.io/blocks/#demoId43" rel="nofollow ugc"><strong>Weather Map by OWM</strong></a> <strong>(Pro)</strong> – Live interactive weather map WordPress layers powered by OpenWeatherMap. </li>
<li><a href="https://locationweather.io/blocks/#demoId44" rel="nofollow ugc"><strong>Radar Map by Windy</strong></a> – Animated windy weather map radar with 50+ live data layers for storms, rain, and wind. </li>
<li><a href="https://locationweather.io/blocks/#demoId45" rel="nofollow ugc"><strong>Historical Weather Data</strong></a> <strong>(Pro)</strong> – Decades of past weather records, temperature trends, and rainfall history. </li>
<li><a href="https://locationweather.io/blocks/#demoId48" rel="nofollow ugc"><strong>Historical Air Quality Data</strong></a> <strong>(Pro)</strong> – Long-term Air Quality Forecast trends and pollution history. </li>
<li><a href="https://locationweather.io/blocks/#demoId50" rel="nofollow ugc"><strong>Sun & Moon Times</strong></a> <strong>(Pro)</strong> – Sunrise, sunset, moonrise, moonset, daylight duration, and moon phases — full Astronomy Data. </li>
<li><a href="https://locationweather.io/blocks/#demoId54" rel="nofollow ugc"><strong>Custom Weather Search</strong></a> – Let visitors run a <strong>Global Weather Search for any location</strong> instantly. </li>
<li><a href="https://locationweather.io/blocks/#demoId52" rel="nofollow ugc"><strong>Section Header</strong></a> – Professional, styled headings to organize your weather sections.</li>
</ul>
<h3>Add Weather in Elementor & Other Page Builders</h3>
<p><span class="embed-youtube" style="text-align:center; display: block;"><iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/cMNJnJ3d4Zk?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe></span></p>
<p>Location Weather is a fully compatible weather plugin for Elementor, Gutenberg, and every major page builder. Use the dedicated Elementor weather addon to drop saved templates anywhere, or the weather module for Divi, weather shortcode into WPBakery, Beaver Builder, and others. Drag, drop, and design advanced Elementor weather widget sections that match any layout – without writing a line of code.</p>
<h3>Supported Weather APIs & Integrations</h3>
<p>Stop relying on a single data source. Location Weather supports robust weather API integration with:</p>
<ul>
<li><a href="https://openweathermap.org/" rel="nofollow ugc"><strong>OpenWeather</strong></a> – Global coverage with detailed weather data. </li>
<li><a href="https://www.weatherapi.com/" rel="nofollow ugc"><strong>WeatherAPI</strong></a> – A generous, cost-effective free plan and reliable WeatherAPI integration.</li>
</ul>
<p>Switch between sources anytime, so you stay in control of what powers your <strong>WordPress weather forecast</strong> at all times. More APIs integrations are coming soon!</p>
<p><span class="embed-youtube" style="text-align:center; display: block;"><iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/pJzumrOLxSQ?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe></span></p>
<p>See the full Weather API Key Integration <a href="https://locationweather.io/api-integration-guidelines/" rel="nofollow ugc"><strong>Guidelines</strong></a></p>
<h3>Unlock More with Location Weather Pro</h3>
<blockquote>
<p><em>Unlock Pro features and give your visitors a richer, more accurate weather experience. The free WordPress weather widget gives you everything you need to display real-time, location-based weather. Location Weather Pro unlocks the full forecast solution: <a href="https://locationweather.io/pricing/?ref=1" rel="nofollow ugc">Click here to purchase Location Weather now!</a></em></p>
</blockquote>
<h3><a href="https://locationweather.io/add-accurate-in-depth-weather-forecasts/" rel="nofollow ugc">Weather Forecasts Up to 30 Days & 120 Hours</a></h3>
<p>Go further than the competition. Most WordPress weather plugins cap out at 5 days. With Location Weather Pro, offer <strong>1-hourly & 3-hourly up to 120 hours</strong>, and <strong>daily forecasts up to 30 days</strong> — for weather, AQI, and astronomy alike.</p>
<h3><a href="https://locationweather.io/ai-weather-assistant/" rel="nofollow ugc">AI Weather Assistant</a> 🔥</h3>
<p>Add the <strong>AI Weather Assistant</strong> once and let visitors ask anything about the weather in plain language. It understands natural questions and replies instantly with clear, accurate answers – conversational weather intelligence no other WordPress weather plugin offers.</p>
<h3><a href="https://locationweather.io/display-air-quality-details-for-safe-comfortable-planning/" rel="nofollow ugc">Air Quality Index (AQI) & Air Quality Forecast</a></h3>
<p>Expand beyond forecasts with a dedicated air quality section. Display real-time <strong>AQI</strong>, hourly and daily <strong>Air Quality Forecast</strong> trends, historical air data, pollutant breakdowns, and health recommendations – everything an environmental, health, or travel site needs.</p>
<h3><a href="https://locationweather.io/display-sunrise-sunset-and-moon-phase-data/" rel="nofollow ugc">Sun & Moon Times and Astronomy Data</a></h3>
<p>Differentiate your site with <strong>Sun & Moon Times</strong> most weather plugins ignore. Show sunrise, sunset, moonrise, moonset, moon phases, golden hour, daylight duration, and solar events – a <strong>Sun & Moon Times Forecast</strong> that attracts photographers, travelers, and researchers.</p>
<h3><a href="https://locationweather.io/display-reliable-weather-history-for-46-years/" rel="nofollow ugc">Historical Weather Data (Time Machine)</a></h3>
<p>Unlock 46+ years of verified <strong>Historical Weather Data</strong> and 10 years of air quality history with the built-in Time Machine. Pull decades of records for any location and display them instantly – ideal for real estate, agriculture, research, and news platforms.</p>
<h3><a href="https://locationweather.io/visualize-weather-conditions-with-interactive-maps/" rel="nofollow ugc">Advanced Live Weather Maps</a></h3>
<p>Embed an interactive <strong>weather map for WordPress</strong> in minutes. Choose from the OpenWeatherMap map or the <strong>windy weather map</strong> with 50+ live data layers and Windy spot forecasts up to 16 days, giving visitors a professional weather-tracking experience.</p>
<h3><a href="https://locationweather.io/let-visitors-search-the-weather-for-any-location-worldwide/" rel="nofollow ugc">Global Weather Search</a></h3>
<p>Add a single search block and give your audience a Global Weather Search for any location worldwide — search by city, ZIP, or coordinates across <strong>200,000+ cities in 238+ countries.</strong> One toggle opens up the entire world of weather search.</p>
<h3>Deliver Real-Time National Weather Alerts</h3>
<p>Publish live, government-issued weather alerts automatically – no manual updates. Just enable National Weather Alerts, and your site stays current and credible through every severe weather event.</p>
<h3>Display Weather for Your Business Location</h3>
<p>Show weather for one specific location – your hotel, theme park, venue, or event site. In just a few clicks, override the default location label with your own business name, turning your weather display into a branded experience that builds instant local trust.</p>
<h3>Dynamic Weather Forecasts for Locations and Custom Post Types</h3>
<p>Automatically display accurate weather forecasts based on location data stored in your custom post types. Whether you’re managing properties, destinations, events, stores, or listings, the plugin retrieves location information from custom fields and displays weather forecasts automatically.</p>
<h3>More Pro Features You’ll Love</h3>
<p>Location Weather Pro is packed with advanced controls and display options. Here’s everything you unlock:</p>
<ul>
<li>Advanced weather metrics – Precipitation, Real Feel, UV Index, Dew Point, Rain Chance, Snow, and Wind Gust </li>
<li>Real-time National Weather Alerts with show/hide control </li>
<li>Show/hide high and low temperatures </li>
<li>Show/hide real feel (feels-like) temperature </li>
<li>Weather attribution and last-updated time display </li>
<li>Display weather data from custom fields </li>
<li>Multiple city weather support </li>
<li>Real-time AQI with health recommendations </li>
<li>Weather and AQI interactive Graph Charts and Pollutant breakdowns </li>
<li>Interactive radar and detailed weather maps </li>
<li>10 Weather additional data layouts </li>
<li>5 weather additional data list layouts </li>
<li>3 weather additional data grid layouts </li>
<li>Simple and flat-style carousel layouts </li>
<li>Clean, divided, and striped additional-data styles </li>
<li>Weather additional data carousel </li>
<li>Weather forecast data carousel </li>
<li><a href="https://locationweather.io/display-weather-for-visitors-location-by-auto-detection/" rel="nofollow ugc"><strong>Auto-detect visitor location via IP for personalized weather</strong></a> </li>
<li>Custom business location name override for branded displays </li>
<li>Location-based °C/°F units with one-click switching </li>
<li>Auto-detect temperature unit </li>
<li>Display temperature in both °C and °F </li>
<li>Degree symbol (°) only option </li>
<li>Precipitation units in mm/inch </li>
<li><a href="https://locationweather.io/add-dynamic-weather-condition-based-backgrounds/" rel="nofollow ugc"><strong>Weather-based dynamic backgrounds</strong></a> — image and video (HTML5 MP4, WebM, Ogg) and YouTube </li>
<li><a href="https://locationweather.io/display-weather-details-on-a-sleek-popup/" rel="nofollow ugc"><strong>Interactive weather pop-up and detailed view</strong></a> </li>
<li>12+ weather icon packs — animated, static, light, fill, glass-