TI-2026-63492 CVE-2026-94681 · GHSA-723p-cc6q-3w82
WordPress WP Store Locator plugin < 3.0.0 - Denial of Service Attack vulnerability
Priority LOW 26
Unauthenticated Denial of Service Attack in WP Store Locator < 3.0.0 versions.
Vulnerabilities
3 records
TI-2026-02904 CVE-2026-3361 · GHSA-p6p5-j5xg-r643
WP Store Locator <= 2.2.261 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wpsl_address' Post Meta
Priority LOW 28
The WP Store Locator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wpsl_address' post meta value in versions up to, and including, 2.2.261 due to insufficient input sanitization and output es…
TI-2025-32787 CVE-2025-52737 · GHSA-h3j6-fj73-whvg
WordPress WP Store Locator plugin <= 2.2.260 - PHP Object Injection vulnerability
Priority MEDIUM 40
Deserialization of Untrusted Data vulnerability in Tijmen Smit WP Store Locator wp-store-locator allows Object Injection.This issue affects WP Store Locator: from n/a through <= 2.2.260.