WordPress Store Locator WordPress Plugin <= 1.4.14 is vulnerable to Arbitrary File Deletion

Software Store Locator WordPress Type Plugin Vulnerable versions = 1.4.14 Fixed in 1.4.15 OWASP Top 10 A1: Broken Access Control Classification Arbitrary File Deletion CVE CVE-2023-50885 Patch priority Low CVSS severity Low 6.8 Developer Claim ownership PSID 1c07670a139d Credits Khalid Yusuf...

WordPress Store Locator Plugin <= 3.98.7 is vulnerable to Cross Site Request Forgery (CSRF)

Software Store Locator Type Plugin Vulnerable versions = 3.98.7 Fixed in 3.98.8 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2022-47446 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 403399253298 Credits rezaduty Required...