Read the docs

WPExperts

Records61All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high25CVSS 7.0–8.9

Exploited now

WPExperts records in CISA KEV

No WPExperts vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Post Smtp 19 records CRITICAL Mycred 7 records MEDIUM Wp Multi Store Locator 3 records MEDIUM All In One Login 2 records HIGH License Manager For Woocommerce 2 records LOW New User Approve 2 records LOW Password Protected 2 records LOW Wholesale For Woocommerce 2 records LOW

Records

3 records in Wp Multi Store Locator · all components

TI-2023-00147 CVE-2023-0152 · GHSA-28hp-4vvx-8rcm

WP Multi Store Locator <= 2.4 - Contributor+ Stored XSS

Priority MEDIUM 58

The WP Multi Store Locator WordPress plugin through 2.4 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00444 Published 2023-06-05 No fix listed CWE-79
TI-2025-18397 CVE-2025-24680 · GHSA-34gm-qfww-6gwm

WordPress WP Multi Store Locator Plugin <= 2.4.7 - Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in WPExperts.io WP Multistore Locator wp-multi-store-locator allows Reflected XSS.This issue affects WP Multistore Locator: from…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00267 Published 2025-01-27 No fix listed CWE-80
Open these records in search →