Store Locator Wordpress (Unknown) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-06-13. Vendor: Unknown.

CVEs of Store Locator Wordpress

• CVE-2026-9062 - CVSS 3.4 (low), 2026-06-13: The Store Locator WordPress plugin before 1.6.9 does not validate a parameter before using it in a file path, allowing high-privileged users such as…
• CVE-2026-9061 - CVSS 3.5 (low), 2026-06-13: The Store Locator WordPress plugin before 1.6.9 does not sanitize and escape store logo metadata before storing it and outputting it on the Store Locator…
• CVE-2026-9060 - CVSS 3.5 (low), 2026-06-10: The Store Locator WordPress plugin before 1.6.6 does not sanitize and escape one of its settings before storing it and outputting it on the Store Locator…
• CVE-2023-4151 - CVSS 6.1 (medium), 2023-09-04: The Store Locator WordPress plugin before 1.4.13 does not sanitise and escape an invalid nonce before outputting it back in an AJAX response, leading to a…
• CVE-2022-4832 - CVSS 5.4 (medium), 2023-01-23: The Store Locator WordPress plugin before 1.4.9 does not validate and escape some of its shortcode attributes before outputting them back in the page, which…