Vulnerabilities

TI-2025-18397 CVE-2025-24680 · GHSA-34gm-qfww-6gwm

WordPress WP Multi Store Locator Plugin <= 2.4.7 - Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in WPExperts.io WP Multistore Locator wp-multi-store-locator allows Reflected XSS.This issue affects WP Multistore Locator: from…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00267 Published 2025-01-27 No fix listed CWE-80

TI-2024-11575 CVE-2024-12475 · GHSA-7r95-6mr9-6f86

WP Multi Store Locator <= 2.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

LOW 28

The WP Multi Store Locator plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.4.1 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00322 Published 2025-01-04 No fix listed CWE-79

TI-2023-00147 CVE-2023-0152 · GHSA-28hp-4vvx-8rcm

WP Multi Store Locator <= 2.4 - Contributor+ Stored XSS

MEDIUM 58

The WP Multi Store Locator WordPress plugin through 2.4 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00444 Published 2023-06-05 No fix listed CWE-79

Vulnerabilities

Filters

WordPress WP Multi Store Locator Plugin <= 2.4.7 - Cross Site Scripting (XSS) vulnerability

WP Multi Store Locator <= 2.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

WP Multi Store Locator <= 2.4 - Contributor+ Stored XSS