170 matches found
CVE-2023-41507
CVE-2023-41507 CVE-2023-41507 - Super Store Finder v3.6은 store locator 구성 요소에서 products, distance, lat, lng 매개변수를 통해 여러 SQL 인젝션 취약점이 발견되었습니다. Vulnerability Type SQL 인젝션 Vendor of Product Super Store Finder Affected Product Code Base Super Store Finder - 영향을 받는 버전 3.6 이하. 버전 3.7에서 수정됨 CVSS v3.1...
CVE-2023-41508
CVE-2023-41508 CVE-2023-41508 - Super Store Finder v3.6 中存在硬编码密码，允许攻击者访问管理面板。 漏洞类型 访问控制不当 产品供应商 Super Store Finder 受影响产品代码库 Super Store Finder - 受影响版本 3.6 及以下。已在 3.7 版本中修复 CVSS v3.1 向量（基础评分） AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H 10.0 受影响组件 受影响的 Web 管理控制台 攻击类型 远程 影响：拒绝服务 true 影响：权限提升 true 影响：代码执行 tr...
CVE-2026-81768
Unauthenticated Cross Site Scripting XSS in Super Store Finder = 7.10 versions...
CVE-2026-81768 WordPress Super Store Finder plugin <= 7.10 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Super Store Finder = 7.10 versions...
CVE-2026-81768
CVE-2026-81768 is an unauthenticated Cross Site Scripting (XSS) vulnerability in the WordPress plugin Super Store Finder , affecting versions
EUVD-2026-68790
Unauthenticated Cross Site Scripting XSS in Super Store Finder = 7.10 versions...
WordPress Super Store Finder plugin <= 7.10 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by dutafi in WordPress Plugin Super Store Finder versions = 7.10...
CVE-2026-73392
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Duplicate to CVE-2026-12965...
CVE-2026-73392
...
CVE-2026-73392
CVE-2026-73392 describes an unauthenticated SQL injection in the WordPress plugin Super Store Finder , affecting versions ≤ 7.8 (prior to 7.9). The vulnerability allows an unauthenticated attacker to interfere with database queries, potentially retrieving data they should not access. The issue wa...
EUVD-2026-60799
Unauthenticated SQL Injection in Super Store Finder = 7.8 versions...
CVE-2026-73392
Unauthenticated SQL Injection in Super Store Finder = 7.8 versions...
PT-2026-77113
Name of the Vulnerable Software and Affected Versions Super Store Finder versions prior to 7.9 Description An unauthenticated SQL Injection exists in the software. SQL Injection is a type of vulnerability that allows an attacker to interfere with the queries that an application makes to its...
CVE-2026-12965 Super Store Finder < 7.11 - Unauthenticated SQL Injection via ssf_tracking
The Super Store Finder WordPress plugin before 7.11 does not sanitize a parameter of an unauthenticated AJAX action before using it in a SQL query, allowing unauthenticated attackers to perform SQL injection and extract data from the database...
CVE-2026-12965
The CVE-2026-12965 entry concerns the WordPress plugin Super Store Finder (versions up to 7.8). It describes an issue where a parameter from an unauthenticated AJAX action is not sanitized before being used in a SQL query, enabling SQL injection and data extraction from the database. This is the ...
CVE-2026-12965 Super Store Finder < 7.11 - Unauthenticated SQL Injection via ssf_tracking
The Super Store Finder WordPress plugin before 7.11 does not sanitize a parameter of an unauthenticated AJAX action before using it in a SQL query, allowing unauthenticated attackers to perform SQL injection and extract data from the database...
EUVD-2026-52169
The Super Store Finder WordPress plugin through 7.8 does not sanitize a parameter of an unauthenticated AJAX action before using it in a SQL query, allowing unauthenticated attackers to perform SQL injection and extract data from the database...
CVE-2026-12965
The Super Store Finder WordPress plugin through 7.8 does not sanitize a parameter of an unauthenticated AJAX action before using it in a SQL query, allowing unauthenticated attackers to perform SQL injection and extract data from the database...
