Plugin icon

Locatoraid Store Locator

locatoraid

Vulnerabilities:

9

Last Updated:

August 20, 2026

Active Installs:

1000

Published
Title
Fixed in
CVSS
Published
2026-08-20
Title
Locatoraid Store Locator < 3.9.73 - Unauthenticated SQL Injection
Fixed in
Fixed in 3.9.73
CVSS
7.5 (high)
Published
2025-12-31
Title
Locatoraid Store Locator <= 3.9.65 - Authenticated (Administrator+) Stored Cross-Site Scripting
Fixed in
No known fix
CVSS
4.4 (medium)
Published
2025-01-03
Title
Locatoraid Store Locator < 3.9.51 - Unauthenticated PHP Object Injection
Fixed in
Fixed in 3.9.51
CVSS
9.8 (critical)
Published
2024-10-15
Title
Locatoraid Store Locator < 3.9.48 - Reflected Cross-Site Scripting
Fixed in
Fixed in 3.9.48
CVSS
6.1 (medium)
Published
2024-03-25
Title
Locatoraid Store Locator < 3.9.31 - Authenticated (Administrator+) Stored Cross-Site Scripting
Fixed in
Fixed in 3.9.31
CVSS
5.5 (medium)
Published
2023-08-28
Title
Locatoraid Store Locator < 3.9.24 - Reflected XSS
Fixed in
Fixed in 3.9.24
CVSS
7.1 (high)
Published
2023-05-11
Title
Locatoraid Store Locator < 3.9.19 - Subscriber+ Stored XSS
Fixed in
Fixed in 3.9.19
CVSS
8.0 (high)
Published
2023-04-17
Title
Locatoraid Store Locator < 3.9.15 - Contributor+ Stored Cross-Site Scripting
Fixed in
Fixed in 3.9.15
CVSS
5.4 (medium)
Published
2023-02-14
Title
Locatoraid Store Locator < 3.9.12 - CSRF
Fixed in
Fixed in 3.9.12
CVSS
4.3 (medium)