CVE-2023-41508

CVE-2023-41508 CVE-2023-41508 - A hard-coded password in Super Store Finder v3.6 allows attackers to access the administration panel. Vulnerability Type Incorrect Access Control Vendor of Product Super Store Finder Affected Product Code Base Super Store Finder - Affected version 3.6 or below. Fix...

CVE-2023-41507

CVE-2023-41507 CVE-2023-41507 - Super Store Finder v3.6 was discovered to contain multiple SQL injection vulnerabilities in the store locator component via the products, distance, lat, and lng parameters. Vulnerability Type SQL Injection Vendor of Product Super Store Finder Affected Product Code...

CVE-2026-81768

Unauthenticated Cross Site Scripting XSS in Super Store Finder = 7.10 versions...

CVE-2026-81768

CVE-2026-81768 is an unauthenticated Cross Site Scripting (XSS) vulnerability in the WordPress plugin Super Store Finder , affecting versions

CVE-2026-81768 WordPress Super Store Finder plugin <= 7.10 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Super Store Finder = 7.10 versions...

EUVD-2026-68790

Unauthenticated Cross Site Scripting XSS in Super Store Finder = 7.10 versions...

CVE-2026-81768 WordPress Super Store Finder plugin <= 7.10 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Super Store Finder = 7.10 versions...

PT-2026-84015

Unauthenticated Cross Site Scripting XSS in Super Store Finder = 7.10 versions...

CVE-2026-81768: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Super Store Finder = 7.10 versions...

WordPress Super Store Finder plugin <= 7.10 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by dutafi in WordPress Plugin Super Store Finder versions = 7.10...

WordPress Super Store Finder plugin <= 7.8 - Unauthenticated SQL Injection via ssf_tracking vulnerability

Unauthenticated SQL Injection via ssftracking vulnerability discovered by Michael Bielenberg in WordPress Plugin Super Store Finder versions = 7.8...

CVE-2026-73392

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Duplicate to CVE-2026-12965...

CVE-2026-73392

...

CVE-2026-73392

...

CVE-2026-73392

CVE-2026-73392 describes an unauthenticated SQL injection in the WordPress plugin Super Store Finder , affecting versions ≤ 7.8 (prior to 7.9). The vulnerability allows an unauthenticated attacker to interfere with database queries, potentially retrieving data they should not access. The issue wa...

CVE-2026-73392

Unauthenticated SQL Injection in Super Store Finder = 7.8 versions...

EUVD-2026-60799

Unauthenticated SQL Injection in Super Store Finder = 7.8 versions...

WordPress Super Store Finder plugin <= 7.8 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Denver Jackson in WordPress Plugin Super Store Finder versions = 7.8...

PT-2026-77113

Name of the Vulnerable Software and Affected Versions Super Store Finder versions prior to 7.9 Description An unauthenticated SQL Injection exists in the software. SQL Injection is a type of vulnerability that allows an attacker to interfere with the queries that an application makes to its...

CVE-2026-12965 Super Store Finder < 7.11 - Unauthenticated SQL Injection via ssf_tracking

The Super Store Finder WordPress plugin before 7.11 does not sanitize a parameter of an unauthenticated AJAX action before using it in a SQL query, allowing unauthenticated attackers to perform SQL injection and extract data from the database...