209 matches found
CVE-2023-41507
CVE-2023-41507 Se descubrió que CVE-2023-41507 - Super Store Finder v3.6 contiene múltiples vulnerabilidades de inyección SQL en el componente de localizador de tiendas a través de los parámetros products, distance, lat y lng. Tipo de Vulnerabilidad Inyección SQL Proveedor del Producto Super Stor...
CVE-2026-108541
A SQL injection vulnerability exists in the highwarden Super Store Finder software up to version 3.8 . The flaw resides in an unknown function within the /products/superstorefinder/index.php file, where the manipulation of the lat/lng arguments allows for remote exploitation. To remediate this is...
EUVD-2026-96797
A vulnerability has been found in highwarden Super Store Finder up to 3.8. Affected is an unknown function of the file /products/superstorefinder/index.php. The manipulation of the argument lat/lng leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclos...
CVE-2023-41508
CVE-2023-41508 CVE-2023-41508 - A hard-coded password in Super Store Finder v3.6 allows attackers to access the administration panel. Vulnerability Type Incorrect Access Control Vendor of Product Super Store Finder Affected Product Code Base Super Store Finder - Affected version 3.6 or below. Fix...
CVE-2026-81768
Unauthenticated Cross Site Scripting XSS in Super Store Finder = 7.10 versions...
EUVD-2026-68790
Unauthenticated Cross Site Scripting XSS in Super Store Finder = 7.10 versions...
CVE-2026-81768 WordPress Super Store Finder plugin <= 7.10 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Super Store Finder = 7.10 versions...
CVE-2026-81768
CVE-2026-81768 is an unauthenticated Cross Site Scripting (XSS) vulnerability in the WordPress plugin Super Store Finder , affecting versions
CVE-2026-81768 WordPress Super Store Finder plugin <= 7.10 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Super Store Finder = 7.10 versions...
CVE-2026-81768: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Super Store Finder = 7.10 versions...
PT-2026-84015
Unauthenticated Cross Site Scripting XSS in Super Store Finder = 7.10 versions...
WordPress Super Store Finder plugin <= 7.10 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by dutafi in WordPress Plugin Super Store Finder versions = 7.10...
WordPress Super Store Finder plugin <= 7.8 - Unauthenticated SQL Injection via ssf_tracking vulnerability
Unauthenticated SQL Injection via ssftracking vulnerability discovered by Michael Bielenberg in WordPress Plugin Super Store Finder versions = 7.8...
CVE-2026-73392
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Duplicate to CVE-2026-12965...
CVE-2026-73392
CVE-2026-73392 describes an unauthenticated SQL injection in the WordPress plugin Super Store Finder , affecting versions ≤ 7.8 (prior to 7.9). The vulnerability allows an unauthenticated attacker to interfere with database queries, potentially retrieving data they should not access. The issue wa...
EUVD-2026-60799
Unauthenticated SQL Injection in Super Store Finder = 7.8 versions...
CVE-2026-73392
...
