170 matches found
CVE-2023-41507
CVE-2023-41507 CVE-2023-41507 - 已发现 Super Store Finder v3.6 的商店定位器组件中存在多个 SQL 注入漏洞，涉及 products、distance、lat 和 lng 参数。 漏洞类型 SQL 注入 产品供应商 Super Store Finder 受影响的产品代码库 Super Store Finder - 受影响版本为 3.6 及以下。已在 3.7 版本中修复。 CVSS v3.1 向量（基础评分） AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H 10.0 受影响组件 受影响的后端数据库管理系统 攻击...
CVE-2023-41508
CVE-2023-41508 CVE-2023-41508 - Una contraseña codificada en el código de Super Store Finder v3.6 permite a los atacantes acceder al panel de administración. Tipo de vulnerabilidad Control de acceso incorrecto Proveedor del producto Super Store Finder Base de código del producto afectado Super...
CVE-2026-81768
Unauthenticated Cross Site Scripting XSS in Super Store Finder = 7.10 versions...
CVE-2026-81768 WordPress Super Store Finder plugin <= 7.10 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Super Store Finder = 7.10 versions...
CVE-2026-81768
CVE-2026-81768 is an unauthenticated Cross Site Scripting (XSS) vulnerability in the WordPress plugin Super Store Finder , affecting versions
EUVD-2026-68790
Unauthenticated Cross Site Scripting XSS in Super Store Finder = 7.10 versions...
WordPress Super Store Finder plugin <= 7.10 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by dutafi in WordPress Plugin Super Store Finder versions = 7.10...
CVE-2026-73392
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Duplicate to CVE-2026-12965...
CVE-2026-73392
...
CVE-2026-73392
CVE-2026-73392 describes an unauthenticated SQL injection in the WordPress plugin Super Store Finder , affecting versions ≤ 7.8 (prior to 7.9). The vulnerability allows an unauthenticated attacker to interfere with database queries, potentially retrieving data they should not access. The issue wa...
CVE-2026-73392
Unauthenticated SQL Injection in Super Store Finder = 7.8 versions...
EUVD-2026-60799
Unauthenticated SQL Injection in Super Store Finder = 7.8 versions...
PT-2026-77113
Name of the Vulnerable Software and Affected Versions Super Store Finder versions prior to 7.9 Description An unauthenticated SQL Injection exists in the software. SQL Injection is a type of vulnerability that allows an attacker to interfere with the queries that an application makes to its...
CVE-2026-12965 Super Store Finder < 7.11 - Unauthenticated SQL Injection via ssf_tracking
The Super Store Finder WordPress plugin before 7.11 does not sanitize a parameter of an unauthenticated AJAX action before using it in a SQL query, allowing unauthenticated attackers to perform SQL injection and extract data from the database...
CVE-2026-12965
The CVE-2026-12965 entry concerns the WordPress plugin Super Store Finder (versions up to 7.8). It describes an issue where a parameter from an unauthenticated AJAX action is not sanitized before being used in a SQL query, enabling SQL injection and data extraction from the database. This is the ...
CVE-2026-12965 Super Store Finder < 7.11 - Unauthenticated SQL Injection via ssf_tracking
The Super Store Finder WordPress plugin before 7.11 does not sanitize a parameter of an unauthenticated AJAX action before using it in a SQL query, allowing unauthenticated attackers to perform SQL injection and extract data from the database...
EUVD-2026-52169
The Super Store Finder WordPress plugin through 7.8 does not sanitize a parameter of an unauthenticated AJAX action before using it in a SQL query, allowing unauthenticated attackers to perform SQL injection and extract data from the database...
CVE-2026-12965
The Super Store Finder WordPress plugin through 7.8 does not sanitize a parameter of an unauthenticated AJAX action before using it in a SQL query, allowing unauthenticated attackers to perform SQL injection and extract data from the database...
