Store Locator WordPress < 1.4.13 - Cross-Site Scripting

The Store Locator WordPress plugin before 1.4.13 does not sanitise and escape an invalid nonce before outputting it back in an AJAX response, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. id: CVE-2023-4151 info: name: Store Locator...

CVE-2026-105078

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Store Locator WP Store Locator wp-store-locator allows Stored XSS.This issue affects WP Store Locator: from n/a through 3.0.3...

CVE-2026-105078

The WP Store Locator WordPress plugin (versions up to and including 3.0.3 ) is vulnerable to Stored Cross-site Scripting (XSS) . This issue is caused by the improper neutralization of input during web page generation. An attacker could potentially exploit this to execute malicious scripts in the ...

CVE-2026-105078 WordPress WP Store Locator plugin <= 3.0.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Store Locator WP Store Locator wp-store-locator allows Stored XSS.This issue affects WP Store Locator: from n/a through 3.0.3...

EUVD-2026-94947

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Store Locator WP Store Locator wp-store-locator allows Stored XSS.This issue affects WP Store Locator: from n/a through 3.0.3...

WordPress WP Store Locator plugin <= 3.0.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Intrudify in WordPress Plugin WP Store Locator versions = 3.0.3...

CVE-2023-41507

CVE-2023-41507 Se descubrió que CVE-2023-41507 - Super Store Finder v3.6 contiene múltiples vulnerabilidades de inyección SQL en el componente de localizador de tiendas a través de los parámetros products, distance, lat y lng. Tipo de Vulnerabilidad Inyección SQL Proveedor del Producto Super Stor...

CVE-2026-94681

Unauthenticated Denial of Service Attack in WP Store Locator 3.0.0 versions...

CVE-2026-94681 WordPress WP Store Locator plugin < 3.0.0 - Denial of Service Attack vulnerability

Unauthenticated Denial of Service Attack in WP Store Locator 3.0.0 versions...

CVE-2026-94681

The WP Store Locator WordPress plugin versions prior to 3.0.0 are vulnerable to an unauthenticated Denial of Service (DoS) attack. While the vulnerability allows an attacker to impact service availability, the provided documents do not specify the underlying root cause, specific affected function...

CVE-2026-94681 WordPress WP Store Locator plugin < 3.0.0 - Denial of Service Attack vulnerability

Unauthenticated Denial of Service Attack in WP Store Locator 3.0.0 versions...

EUVD-2026-89851

Unauthenticated Denial of Service Attack in WP Store Locator 3.0.0 versions...

CVE-2026-94681: Allocation of Resources Without Limits or Throttling

Unauthenticated Denial of Service Attack in WP Store Locator 3.0.0 versions...

PT-2026-103183

Unauthenticated Denial of Service Attack in WP Store Locator 3.0.0 versions...

CVE-2026-13179

The WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shapesvalues Parameter in all versions up to, and including, 4.9.8 due to insufficient input sanitization and output escaping. This makes ...

CVE-2026-13456

The WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.9.8 via the 'page' parameter parameter. This makes it possible for authenticated attackers, with...

EUVD-2026-86600

The WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shapesvalues Parameter in all versions up to, and including, 4.9.8 due to insufficient input sanitization and output escaping. This makes ...

EUVD-2026-86595

The WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.9.8 via the 'page' parameter parameter. This makes it possible for authenticated attackers, with...

WordPress WP Store Locator plugin < 3.0.0 - Denial of Service Attack vulnerability

Denial of Service Attack vulnerability discovered by satokan in WordPress Plugin WP Store Locator versions 3.0.0...

WordPress Agile Store Locator plugin < 1.6.9 - Admin+ Stored XSS via logo_name vulnerability

Admin+ Stored XSS via logoname vulnerability discovered by TRAN THE LONG in WordPress Plugin Store Locator WordPress versions 1.6.9...