CVE-2026-12965

CVE-2026-12965 affects the WordPress plugin Super Store Finder up to version 7.8. An unauthenticated AJAX action passes an unsanitized parameter into a SQL query, enabling SQL injection and data extraction from the database. No exploit details or remediation are provided in the documents; no furt...