87 matches found
CVE-2026-66680
Unauthenticated SQL Injection in Locatoraid Store Locator = 3.9.72 versions...
CVE-2026-66680 WordPress Locatoraid Store Locator plugin <= 3.9.72 - SQL Injection vulnerability
Unauthenticated SQL Injection in Locatoraid Store Locator = 3.9.72 versions...
EUVD-2026-63306
Unauthenticated SQL Injection in Locatoraid Store Locator = 3.9.72 versions...
CVE-2026-66680 WordPress Locatoraid Store Locator plugin <= 3.9.72 - SQL Injection vulnerability
Unauthenticated SQL Injection in Locatoraid Store Locator = 3.9.72 versions...
CVE-2026-66680
Locatoraid Store Locator is a WordPress plugin affected by an unauthenticated SQL injection vulnerability in versions
WordPress Locatoraid Store Locator plugin <= 3.9.72 - SQL Injection vulnerability
SQL Injection vulnerability discovered by arrester in WordPress Plugin Locatoraid Store Locator versions = 3.9.72...
PT-2026-78979
Unauthenticated SQL Injection in Locatoraid Store Locator = 3.9.72 versions...
CVE-2026-66680: Improper Neutralization of Special Elements used in an SQL Command
Unauthenticated SQL Injection in Locatoraid Store Locator = 3.9.72 versions...
CVE-2023-4476
The Locatoraid Store Locator WordPress plugin before 3.9.24 does not sanitise and escape the lpr-search parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
CVE-2023-25709
Cross-Site Request Forgery CSRF vulnerability in Plainware Locatoraid Store Locator plugin = 3.9.11 versions...
CVE-2025-62140
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in plainware Locatoraid Store Locator locatoraid allows Stored XSS.This issue affects Locatoraid Store Locator: from n/a through = 3.9.68...
CVE-2025-62140
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in plainware Locatoraid Store Locator locatoraid allows Stored XSS.This issue affects Locatoraid Store Locator: from n/a through = 3.9.68...
CVE-2025-62140 WordPress Locatoraid Store Locator plugin <= 3.9.65 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Plainware Locatoraid Store Locator allows Stored XSS.This issue affects Locatoraid Store Locator: from n/a through 3.9.65...
CVE-2025-62140 WordPress Locatoraid Store Locator plugin <= 3.9.68 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in plainware Locatoraid Store Locator locatoraid allows Stored XSS.This issue affects Locatoraid Store Locator: from n/a through = 3.9.68...
EUVD-2025-205966
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Plainware Locatoraid Store Locator allows Stored XSS.This issue affects Locatoraid Store Locator: from n/a through 3.9.65...
CVE-2025-62140
Technical details about CVE-2025-62140 (Locatoraid Store Locator XSS) are not provided in the connected documents; no affected versions, impact, or fixes are specified here. Monitor official advisories for updates and patches.
WordPress Locatoraid Store Locator plugin <= 3.9.67 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Zeeshan Haider in WordPress Plugin Locatoraid Store Locator versions = 3.9.67...
PT-2025-54332
Name of the Vulnerable Software and Affected Versions Plainware Locatoraid Store Locator versions through 3.9.65 Description A flaw exists in Plainware Locatoraid Store Locator that allows for Stored Cross-Site Scripting XSS. This issue arises from improper neutralization of input during web page...
CVE-2025-62140: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in plainware Locatoraid Store Locator locatoraid allows Stored XSS.This issue affects Locatoraid Store Locator: from n/a through = 3.9.68...