Read the docs

moaluko

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

moaluko records in CISA KEV

No moaluko vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2024-11664 CVE-2024-12571 · GHSA-qf22-8jqw-2fqh

Store Locator <= 3.98.10 - Unauthenticated Local File Inclusion

Priority MEDIUM 51

The Store Locator for WordPress with Google Maps – LotsOfLocales plugin for WordPress is vulnerable to Local File Inclusion in version 3.98.9 via the 'sl_engine' parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00928 Published 2024-12-20 No fix listed CWE-98
TI-2025-17189 CVE-2025-23422 · GHSA-rr7g-g6mc-fp64

WordPress Store Locator plugin <= 3.98.10 - Local File Inclusion vulnerability

Priority LOW 36

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in moaluko Store Locator store-locator allows PHP Local File Inclusion.This issue affects Store Locator: from n/a through <= 3.…

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00642 Published 2025-01-24 No fix listed CWE-22
Open these records in search →