Plugin icon

Store Locator WordPress

agile-store-locator

Vulnerabilities:

11

Last Updated:

July 2, 2026

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2026-05-23
Title
Agile Store Locator < 1.6.9 - Admin+ Stored XSS via logo_name
Fixed in
Fixed in 1.6.9
CVSS
3.5 (low)
Published
2026-05-23
Title
Agile Store Locator < 1.6.9 - Admin+ Arbitrary File Read via Path Traversal
Fixed in
Fixed in 1.6.9
CVSS
4.1 (medium)
Published
2026-05-20
Title
Agile Store Locator < 1.6.6 - Admin+ Stored XSS via map_style
Fixed in
Fixed in 1.6.6
CVSS
3.5 (low)
Published
2025-12-14
Title
Store Locator WordPress < 1.6.3 - Authenticated (Contributor+) SQL Injection
Fixed in
Fixed in 1.6.3
CVSS
6.5 (medium)
Published
2025-06-05
Title
Store Locator WordPress < 1.5.3 - Authenticated (Admin+) Arbitrary File Upload
Fixed in
Fixed in 1.5.3
CVSS
7.2 (high)
Published
2025-06-05
Title
Store Locator WordPress < 1.5.2 - Authenticated (Administrator+) SQL Injection
Fixed in
Fixed in 1.5.2
CVSS
4.9 (medium)
Published
2023-12-26
Title
Store Locator WordPress < 1.4.15 - Admin+ Arbitrary File Deletion
Fixed in
Fixed in 1.4.15
CVSS
4.4 (medium)
Published
2023-08-10
Title
Store Locator WordPress < 1.4.13 - Reflected XSS
Fixed in
Fixed in 1.4.13
CVSS
7.1 (high)
Published
2023-03-20
Title
Store Locator WordPress < 1.4.10 - Editor+ Stored XSS
Fixed in
Fixed in 1.4.10
CVSS
3.5 (low)
Published
2022-12-24
Title
Store Locator WordPress < 1.4.9 - Contributor+ Stored XSS via Shortcode
Fixed in
Fixed in 1.4.9
CVSS
6.8 (medium)
Published
2022-09-28
Title
Store Locator < 1.4.6 - Stored XSS via CSRF
Fixed in
Fixed in 1.4.6
CVSS
6.1 (medium)