CVE-2023-41508

CVE-2023-41508 CVE-2023-41508 - كلمة مرور ثابتة في Super Store Finder الإصدار 3.6 تسمح للمهاجمين بالوصول إلى لوحة الإدارة. نوع الثغرة التحكم غير الصحيح في الوصول البائع/المنتج Super Store Finder قاعدة كود المنتج المتأثر Super Store Finder - الإصدار 3.6 أو أقل. تم إصلاحها في الإصدار 3.7 ناقل CVSS...

CVE-2023-41507

CVE-2023-41507 CVE-2023-41507 - تم اكتشاف أن Super Store Finder الإصدار 3.6 يحتوي على ثغرات متعددة في حقن SQL في مكوّن محدد المتاجر عبر المعاملات products و distance و lat و lng. نوع الثغرة حقن SQL بائع المنتج Super Store Finder قاعدة كود المنتج المتأثر Super Store Finder - الإصدار المتأثر 3.6 أو...

CVE-2026-81768

Unauthenticated Cross Site Scripting XSS in Super Store Finder = 7.10 versions...

CVE-2026-81768 WordPress Super Store Finder plugin <= 7.10 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Super Store Finder = 7.10 versions...

CVE-2026-81768

CVE-2026-81768 is an unauthenticated Cross Site Scripting (XSS) vulnerability in the WordPress plugin Super Store Finder , affecting versions

EUVD-2026-68790

Unauthenticated Cross Site Scripting XSS in Super Store Finder = 7.10 versions...

CVE-2026-81768 WordPress Super Store Finder plugin <= 7.10 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Super Store Finder = 7.10 versions...

PT-2026-84015

Unauthenticated Cross Site Scripting XSS in Super Store Finder = 7.10 versions...

CVE-2026-81768: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Super Store Finder = 7.10 versions...

WordPress Super Store Finder plugin <= 7.10 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by dutafi in WordPress Plugin Super Store Finder versions = 7.10...

WordPress Super Store Finder plugin <= 7.8 - Unauthenticated SQL Injection via ssf_tracking vulnerability

Unauthenticated SQL Injection via ssftracking vulnerability discovered by Michael Bielenberg in WordPress Plugin Super Store Finder versions = 7.8...

CVE-2026-73392

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Duplicate to CVE-2026-12965...

CVE-2026-73392

Unauthenticated SQL Injection in Super Store Finder = 7.8 versions...

CVE-2026-73392

...

CVE-2026-73392

CVE-2026-73392 describes an unauthenticated SQL injection in the WordPress plugin Super Store Finder , affecting versions ≤ 7.8 (prior to 7.9). The vulnerability allows an unauthenticated attacker to interfere with database queries, potentially retrieving data they should not access. The issue wa...

EUVD-2026-60799

Unauthenticated SQL Injection in Super Store Finder = 7.8 versions...

CVE-2026-73392

...

WordPress Super Store Finder plugin <= 7.8 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Denver Jackson in WordPress Plugin Super Store Finder versions = 7.8...

PT-2026-77113

Name of the Vulnerable Software and Affected Versions Super Store Finder versions prior to 7.9 Description An unauthenticated SQL Injection exists in the software. SQL Injection is a type of vulnerability that allows an attacker to interfere with the queries that an application makes to its...

CVE-2026-12965 Super Store Finder < 7.11 - Unauthenticated SQL Injection via ssf_tracking

The Super Store Finder WordPress plugin before 7.11 does not sanitize a parameter of an unauthenticated AJAX action before using it in a SQL query, allowing unauthenticated attackers to perform SQL injection and extract data from the database...