CVE-2024-12571

The Store Locator for WordPress with Google Maps – LotsOfLocales plugin for WordPress is vulnerable to Local File Inclusion in version 3.98.9 via the 'slengine' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the...

CVE-2024-12571 Store Locator <= 3.98.10 - Unauthenticated Local File Inclusion

The Store Locator for WordPress with Google Maps – LotsOfLocales plugin for WordPress is vulnerable to Local File Inclusion in version 3.98.9 via the 'slengine' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the...

CVE-2024-12571

CVE-2024-12571 affects the Store Locator for WordPress with Google Maps – LotsOfLocales plugin (WordPress) up to version 3.98.10. The issue is an unauthenticated Local File Inclusion via the sl_engine parameter, enabling an attacker to include and execute arbitrary PHP code on the server, potenti...