WPExperts.io

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

WPExperts.io records in CISA KEV

No WPExperts.io vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2025-20841 CVE-2025-28898 · GHSA-7f56-j9jp-755p

WordPress WP Multistore Locator plugin <= 2.5.2 - SQL Injection vulnerability

MEDIUM 47

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPExperts.io WP Multistore Locator wp-multi-store-locator allows SQL Injection.This issue affects WP Multistore Locato…

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00602 Published 2025-03-26 No fix listed CWE-89

TI-2025-19845 CVE-2025-26974 · GHSA-86f4-3c5q-987m

WordPress WP Multi Store Locator plugin <= 2.5.1 - SQL Injection vulnerability

MEDIUM 43

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPExperts.io WP Multistore Locator wp-multi-store-locator allows Blind SQL Injection.This issue affects WP Multistore…

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00527 Published 2025-02-25 No fix listed CWE-89

TI-2025-23025 CVE-2025-31888 · GHSA-j8fj-wjcc-r62c

WordPress WP Multi Store Locator Plugin <= 2.5.2 - Cross Site Request Forgery (CSRF) vulnerability

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in WPExperts.io WP Multistore Locator wp-multi-store-locator allows Cross Site Request Forgery.This issue affects WP Multistore Locator: from n/a through <= 2.5.2.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00156 Published 2025-04-01 No fix listed CWE-352

Open these records in search →

Critical	2
High	0
Medium	1
Low	0
No CVSS	0