Vulnerabilities

TI-2014-07082 CVE-2014-8621 · GHSA-j62f-48c7-864m

SQL injection vulnerability in the Store Locator plugin 2.3 through 3.11 for WordPress…

MEDIUM 48

SQL injection vulnerability in the Store Locator plugin 2.3 through 3.11 for WordPress allows remote attackers to execute arbitrary SQL commands via the sl_custom_field parameter to sl-xml.php.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02993 Published 2017-10-16 No fix listed CWE-89

TI-2015-03858 CVE-2015-4610 · GHSA-76qj-6v2f-pcp7

SQL injection vulnerability in the Store Locator (locator) extension before 3.3.1 for…

LOW 31

SQL injection vulnerability in the Store Locator (locator) extension before 3.3.1 for TYPO3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.01029 Published 2015-06-16 No fix listed CWE-89

Vulnerabilities

Filters

SQL injection vulnerability in the Store Locator plugin 2.3 through 3.11 for WordPress…

SQL injection vulnerability in the Store Locator (locator) extension before 3.3.1 for…