CVE-2023-41508

CVE-2023-41508 CVE-2023-41508 - A hard-coded password in Super Store Finder v3.6 allows attackers to access the administration panel. Vulnerability Type Incorrect Access Control Vendor of Product Super Store Finder Affected Product Code Base Super Store Finder - Affected version 3.6 or below. Fix...

CVE-2023-41507

CVE-2023-41507 CVE-2023-41507 - Super Store Finder v3.6 was discovered to contain multiple SQL injection vulnerabilities in the store locator component via the products, distance, lat, and lng parameters. Vulnerability Type SQL Injection Vendor of Product Super Store Finder Affected Product Code...

CVE-2026-108541

A vulnerability has been found in highwarden Super Store Finder up to 3.8. Affected is an unknown function of the file /products/superstorefinder/index.php. The manipulation of the argument lat/lng leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclos...

CVE-2026-108541

A SQL injection vulnerability exists in the highwarden Super Store Finder software up to version 3.8 . The flaw resides in an unknown function within the /products/superstorefinder/index.php file, where the manipulation of the lat/lng arguments allows for remote exploitation. To remediate this is...

CVE-2026-108541 highwarden Super Store Finder index.php sql injection

A vulnerability has been found in highwarden Super Store Finder up to 3.8. Affected is an unknown function of the file /products/superstorefinder/index.php. The manipulation of the argument lat/lng leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclos...

EUVD-2026-96797

A vulnerability has been found in highwarden Super Store Finder up to 3.8. Affected is an unknown function of the file /products/superstorefinder/index.php. The manipulation of the argument lat/lng leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclos...

PT-2026-110071

Name of the Vulnerable Software and Affected Versions highwarden Super Store Finder versions prior to 3.9 Description An issue exists in the /products/superstorefinder/index.php file where manipulation of the lat/lng argument allows for SQL injection, a technique used to interfere with the querie...

CVE-2026-81768

Unauthenticated Cross Site Scripting XSS in Super Store Finder = 7.10 versions...

CVE-2026-81768

CVE-2026-81768 is an unauthenticated Cross Site Scripting (XSS) vulnerability in the WordPress plugin Super Store Finder , affecting versions

CVE-2026-81768 WordPress Super Store Finder plugin <= 7.10 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Super Store Finder = 7.10 versions...

EUVD-2026-68790

Unauthenticated Cross Site Scripting XSS in Super Store Finder = 7.10 versions...

CVE-2026-81768 WordPress Super Store Finder plugin <= 7.10 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Super Store Finder = 7.10 versions...

PT-2026-84015

Unauthenticated Cross Site Scripting XSS in Super Store Finder = 7.10 versions...

CVE-2026-81768: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Super Store Finder = 7.10 versions...

WordPress Super Store Finder plugin <= 7.10 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by dutafi in WordPress Plugin Super Store Finder versions = 7.10...

WordPress Super Store Finder plugin <= 7.8 - Unauthenticated SQL Injection via ssf_tracking vulnerability

Unauthenticated SQL Injection via ssftracking vulnerability discovered by Michael Bielenberg in WordPress Plugin Super Store Finder versions = 7.8...

CVE-2026-73392

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Duplicate to CVE-2026-12965...

CVE-2026-73392

...

CVE-2026-73392

...

CVE-2026-73392

CVE-2026-73392 describes an unauthenticated SQL injection in the WordPress plugin Super Store Finder , affecting versions ≤ 7.8 (prior to 7.9). The vulnerability allows an unauthenticated attacker to interfere with database queries, potentially retrieving data they should not access. The issue wa...