Store Locator WordPress < 1.4.13 - Cross-Site Scripting

The Store Locator WordPress plugin before 1.4.13 does not sanitise and escape an invalid nonce before outputting it back in an AJAX response, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. id: CVE-2023-4151 info: name: Store Locator...

CVE-2023-41507

CVE-2023-41507 Se descubrió que CVE-2023-41507 - Super Store Finder v3.6 contiene múltiples vulnerabilidades de inyección SQL en el componente de localizador de tiendas a través de los parámetros products, distance, lat y lng. Tipo de Vulnerabilidad Inyección SQL Proveedor del Producto Super Stor...

CVE-2026-94681

Unauthenticated Denial of Service Attack in WP Store Locator 3.0.0 versions...

EUVD-2026-89851

Unauthenticated Denial of Service Attack in WP Store Locator 3.0.0 versions...

CVE-2026-94681 WordPress WP Store Locator plugin < 3.0.0 - Denial of Service Attack vulnerability

Unauthenticated Denial of Service Attack in WP Store Locator 3.0.0 versions...

CVE-2026-94681

The WP Store Locator WordPress plugin versions prior to 3.0.0 are vulnerable to an unauthenticated Denial of Service (DoS) attack. While the vulnerability allows an attacker to impact service availability, the provided documents do not specify the underlying root cause, specific affected function...

CVE-2026-94681 WordPress WP Store Locator plugin < 3.0.0 - Denial of Service Attack vulnerability

Unauthenticated Denial of Service Attack in WP Store Locator 3.0.0 versions...

CVE-2026-94681: Allocation of Resources Without Limits or Throttling

Unauthenticated Denial of Service Attack in WP Store Locator 3.0.0 versions...

CVE-2026-13179

The WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shapesvalues Parameter in all versions up to, and including, 4.9.8 due to insufficient input sanitization and output escaping. This makes ...

CVE-2026-13456

The WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.9.8 via the 'page' parameter parameter. This makes it possible for authenticated attackers, with...

EUVD-2026-86600

The WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shapesvalues Parameter in all versions up to, and including, 4.9.8 due to insufficient input sanitization and output escaping. This makes ...

EUVD-2026-86595

The WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.9.8 via the 'page' parameter parameter. This makes it possible for authenticated attackers, with...

WordPress WP Store Locator plugin < 3.0.0 - Denial of Service Attack vulnerability

Denial of Service Attack vulnerability discovered by satokan in WordPress Plugin WP Store Locator versions 3.0.0...

WordPress Agile Store Locator plugin < 1.6.9 - Admin+ Stored XSS via logo_name vulnerability

Admin+ Stored XSS via logoname vulnerability discovered by TRAN THE LONG in WordPress Plugin Store Locator WordPress versions 1.6.9...

WordPress WP Multi Store Locator Pro plugin <= 4.5.1 - Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability discovered by Rafie Muhammad in WordPress Plugin WP Multi Store Locator Pro versions = 4.5.1...

CVE-2026-15275

The WP Multi Store Locator Pro plugin for WordPress is vulnerable to generic SQL Injection via the 'storelocatoresearchradius' parameter in all versions up to, and including, 4.5.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL...

EUVD-2026-82761

The WP Multi Store Locator Pro plugin for WordPress is vulnerable to generic SQL Injection via the 'storelocatoresearchradius' parameter in all versions up to, and including, 4.5.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL...

CVE-2026-15275

The WP Multi Store Locator Pro WordPress plugin is vulnerable to unauthenticated SQL injection in all versions up to and including 4.5.1 . The root cause is insufficient escaping and unprepared SQL in the store_locator_search_radius parameter, which sits in a numeric, unquoted context that bypass...

CVE-2026-15275 WP Multi Store Locator Pro <= 4.5.1 - Unauthenticated SQL Injection via 'store_locator_search_radius' Parameter

The WP Multi Store Locator Pro plugin for WordPress is vulnerable to generic SQL Injection via the 'storelocatoresearchradius' parameter in all versions up to, and including, 4.5.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL...

CVE-2026-15275 WP Multi Store Locator Pro <= 4.5.1 - Unauthenticated SQL Injection via 'store_locator_search_radius' Parameter

The WP Multi Store Locator Pro plugin for WordPress is vulnerable to generic SQL Injection via the 'storelocatoresearchradius' parameter in all versions up to, and including, 4.5.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL...