CVE-2023-41508

CVE-2023-41508 CVE-2023-41508 - كلمة مرور ثابتة في Super Store Finder الإصدار 3.6 تسمح للمهاجمين بالوصول إلى لوحة الإدارة. نوع الثغرة التحكم غير الصحيح في الوصول البائع/المنتج Super Store Finder قاعدة كود المنتج المتأثر Super Store Finder - الإصدار 3.6 أو أقل. تم إصلاحها في الإصدار 3.7 ناقل CVSS...

CVE-2023-41507

CVE-2023-41507 CVE-2023-41507 - تم اكتشاف أن Super Store Finder الإصدار 3.6 يحتوي على ثغرات متعددة في حقن SQL في مكوّن محدد المتاجر عبر المعاملات products و distance و lat و lng. نوع الثغرة حقن SQL بائع المنتج Super Store Finder قاعدة كود المنتج المتأثر Super Store Finder - الإصدار المتأثر 3.6 أو...

CVE-2026-81768

Unauthenticated Cross Site Scripting XSS in Super Store Finder = 7.10 versions...

CVE-2026-81768

CVE-2026-81768 is an unauthenticated Cross Site Scripting (XSS) vulnerability in the WordPress plugin Super Store Finder , affecting versions

CVE-2026-81768 WordPress Super Store Finder plugin <= 7.10 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Super Store Finder = 7.10 versions...

EUVD-2026-68790

Unauthenticated Cross Site Scripting XSS in Super Store Finder = 7.10 versions...

WordPress Super Store Finder plugin <= 7.10 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by dutafi in WordPress Plugin Super Store Finder versions = 7.10...

CVE-2026-73392

Unauthenticated SQL Injection in Super Store Finder = 7.8 versions...

CVE-2026-73392 WordPress Super Store Finder plugin <= 7.8 - SQL Injection vulnerability

Unauthenticated SQL Injection in Super Store Finder = 7.8 versions...

CVE-2026-73392 WordPress Super Store Finder plugin <= 7.8 - SQL Injection vulnerability

Unauthenticated SQL Injection in Super Store Finder = 7.8 versions...

CVE-2026-73392

The WordPress Super Store Finder plugin (versions ≤7.8) has an unauthenticated SQL injection flaw, allowing remote attackers to execute arbitrary SQL queries without credentials. Patchstack rates it CRITICAL (CVSS 9.3). No patch or exploit details are provided in the documents.

EUVD-2026-60799

Unauthenticated SQL Injection in Super Store Finder = 7.8 versions...

CVE-2026-73392

Unauthenticated SQL Injection in Super Store Finder = 7.8 versions...

PT-2026-77113

Name of the Vulnerable Software and Affected Versions Super Store Finder versions prior to 7.9 Description An unauthenticated SQL Injection exists in the software. SQL Injection is a type of vulnerability that allows an attacker to interfere with the queries that an application makes to its...

CVE-2026-12965 Super Store Finder < 7.11 - Unauthenticated SQL Injection via ssf_tracking

The Super Store Finder WordPress plugin before 7.11 does not sanitize a parameter of an unauthenticated AJAX action before using it in a SQL query, allowing unauthenticated attackers to perform SQL injection and extract data from the database...

CVE-2026-12965

The CVE-2026-12965 entry concerns the WordPress plugin Super Store Finder (versions up to 7.8). It describes an issue where a parameter from an unauthenticated AJAX action is not sanitized before being used in a SQL query, enabling SQL injection and data extraction from the database. This is the ...

EUVD-2026-52169

The Super Store Finder WordPress plugin through 7.8 does not sanitize a parameter of an unauthenticated AJAX action before using it in a SQL query, allowing unauthenticated attackers to perform SQL injection and extract data from the database...

CVE-2026-12965 Super Store Finder < 7.11 - Unauthenticated SQL Injection via ssf_tracking

The Super Store Finder WordPress plugin before 7.11 does not sanitize a parameter of an unauthenticated AJAX action before using it in a SQL query, allowing unauthenticated attackers to perform SQL injection and extract data from the database...

CVE-2026-12965

The Super Store Finder WordPress plugin through 7.8 does not sanitize a parameter of an unauthenticated AJAX action before using it in a SQL query, allowing unauthenticated attackers to perform SQL injection and extract data from the database...

CVE-2023-43835

Super Store Finder 3.7 and below is vulnerable to authenticated Arbitrary PHP Code Injection that could lead to Remote Code Execution when settings overwrite config.inc.php content...