Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: moaluko Clear all filters
TI-2025-17189 CVE-2025-23422 · GHSA-rr7g-g6mc-fp64

WordPress Store Locator plugin <= 3.98.10 - Local File Inclusion vulnerability

Priority LOW 36

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in moaluko Store Locator store-locator allows PHP Local File Inclusion.This issue affects Store Locator: from n/a through <= 3.…

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00642 Published 2025-01-24 No fix listed CWE-22
TI-2024-11664 CVE-2024-12571 · GHSA-qf22-8jqw-2fqh

Store Locator <= 3.98.10 - Unauthenticated Local File Inclusion

Priority MEDIUM 51

The Store Locator for WordPress with Google Maps – LotsOfLocales plugin for WordPress is vulnerable to Local File Inclusion in version 3.98.9 via the 'sl_engine' parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00928 Published 2024-12-20 No fix listed CWE-98