Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: WPExperts.io Clear all filters
TI-2025-20841 CVE-2025-28898 · GHSA-7f56-j9jp-755p

WordPress WP Multistore Locator plugin <= 2.5.2 - SQL Injection vulnerability

Priority MEDIUM 47

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPExperts.io WP Multistore Locator wp-multi-store-locator allows SQL Injection.This issue affects WP Multistore Locato…

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00602 Published 2025-03-26 No fix listed CWE-89
TI-2025-19845 CVE-2025-26974 · GHSA-86f4-3c5q-987m

WordPress WP Multi Store Locator plugin <= 2.5.1 - SQL Injection vulnerability

Priority MEDIUM 43

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPExperts.io WP Multistore Locator wp-multi-store-locator allows Blind SQL Injection.This issue affects WP Multistore…

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00527 Published 2025-02-25 No fix listed CWE-89