Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Store Locator WordPress 1.6.9 Clear all filters
TI-2026-07964 CVE-2026-9062 · GHSA-553w-8mm7-5gf2

Agile Store Locator < 1.6.9 - Admin+ Arbitrary File Read via Path Traversal

Priority MEDIUM 50

The Store Locator WordPress plugin before 1.6.9 does not validate a parameter before using it in a file path, allowing high-privileged users such as administrators to read arbitrary `.php` files from the server, includin…

CVSS 3.1LOW 3.4 Network High privileges User interaction EPSS 0.00486 Published 2026-06-13 Fixed in 1.6.9 CWE-22
TI-2026-07963 CVE-2026-9061 · GHSA-q5mp-4wmh-7f39

Agile Store Locator < 1.6.9 - Admin+ Stored XSS via logo_name

Priority MEDIUM 50

The Store Locator WordPress plugin before 1.6.9 does not sanitize and escape store logo metadata before storing it and outputting it on the Store Locator WordPress plugin before 1.6.9 admin page, allowing high-privileged…

CVSS 3.1LOW 3.5 Network High privileges User interaction EPSS 0.00145 Published 2026-06-13 Fixed in 1.6.9 CWE-79