170 matches found
CVE-2023-41508
CVE-2023-41508 CVE-2023-41508 - Super Store Finder v3.6 中存在硬编码密码，允许攻击者访问管理面板。 漏洞类型 访问控制不当 产品供应商 Super Store Finder 受影响产品代码库 Super Store Finder - 受影响版本 3.6 及以下。已在 3.7 版本中修复 CVSS v3.1 向量（基础评分） AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H 10.0 受影响组件 受影响的 Web 管理控制台 攻击类型 远程 影响：拒绝服务 true 影响：权限提升 true 影响：代码执行 tr...
CVE-2023-41507
CVE-2023-41507 CVE-2023-41507 - 已发现 Super Store Finder v3.6 的商店定位器组件中存在多个 SQL 注入漏洞，涉及 products、distance、lat 和 lng 参数。 漏洞类型 SQL 注入 产品供应商 Super Store Finder 受影响的产品代码库 Super Store Finder - 受影响版本为 3.6 及以下。已在 3.7 版本中修复。 CVSS v3.1 向量（基础评分） AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H 10.0 受影响组件 受影响的后端数据库管理系统 攻击...
CVE-2026-81768
Unauthenticated Cross Site Scripting XSS in Super Store Finder = 7.10 versions...
CVE-2026-81768 WordPress Super Store Finder plugin <= 7.10 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Super Store Finder = 7.10 versions...
CVE-2026-81768
CVE-2026-81768 is an unauthenticated Cross Site Scripting (XSS) vulnerability in the WordPress plugin Super Store Finder , affecting versions
EUVD-2026-68790
Unauthenticated Cross Site Scripting XSS in Super Store Finder = 7.10 versions...
WordPress Super Store Finder plugin <= 7.10 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by dutafi in WordPress Plugin Super Store Finder versions = 7.10...
CVE-2026-73392
Unauthenticated SQL Injection in Super Store Finder = 7.8 versions...
CVE-2026-73392 WordPress Super Store Finder plugin <= 7.8 - SQL Injection vulnerability
Unauthenticated SQL Injection in Super Store Finder = 7.8 versions...
CVE-2026-73392 WordPress Super Store Finder plugin <= 7.8 - SQL Injection vulnerability
Unauthenticated SQL Injection in Super Store Finder = 7.8 versions...
CVE-2026-73392
The WordPress Super Store Finder plugin (versions ≤7.8) has an unauthenticated SQL injection flaw, allowing remote attackers to execute arbitrary SQL queries without credentials. Patchstack rates it CRITICAL (CVSS 9.3). No patch or exploit details are provided in the documents.
EUVD-2026-60799
Unauthenticated SQL Injection in Super Store Finder = 7.8 versions...
CVE-2026-73392
Unauthenticated SQL Injection in Super Store Finder = 7.8 versions...
PT-2026-77113
Name of the Vulnerable Software and Affected Versions Super Store Finder versions prior to 7.9 Description An unauthenticated SQL Injection exists in the software. SQL Injection is a type of vulnerability that allows an attacker to interfere with the queries that an application makes to its...
CVE-2026-12965 Super Store Finder < 7.11 - Unauthenticated SQL Injection via ssf_tracking
The Super Store Finder WordPress plugin before 7.11 does not sanitize a parameter of an unauthenticated AJAX action before using it in a SQL query, allowing unauthenticated attackers to perform SQL injection and extract data from the database...
CVE-2026-12965
The CVE-2026-12965 entry concerns the WordPress plugin Super Store Finder (versions up to 7.8). It describes an issue where a parameter from an unauthenticated AJAX action is not sanitized before being used in a SQL query, enabling SQL injection and data extraction from the database. This is the ...
EUVD-2026-52169
The Super Store Finder WordPress plugin through 7.8 does not sanitize a parameter of an unauthenticated AJAX action before using it in a SQL query, allowing unauthenticated attackers to perform SQL injection and extract data from the database...
CVE-2026-12965 Super Store Finder < 7.11 - Unauthenticated SQL Injection via ssf_tracking
The Super Store Finder WordPress plugin before 7.11 does not sanitize a parameter of an unauthenticated AJAX action before using it in a SQL query, allowing unauthenticated attackers to perform SQL injection and extract data from the database...
CVE-2026-12965
The Super Store Finder WordPress plugin through 7.8 does not sanitize a parameter of an unauthenticated AJAX action before using it in a SQL query, allowing unauthenticated attackers to perform SQL injection and extract data from the database...
