Plugin icon

Super Store Finder WordPress

superstorefinder-wp

Vulnerabilities:

14

Last Updated:

August 28, 2026

Active Installs:

n/a

Published
Title
Fixed in
CVSS
Published
2026-08-28
Title
Super Store Finder < 7.11 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 7.11
CVSS
7.2 (high)
Published
2026-07-24
Title
Super Store Finder < 7.11 - Unauthenticated SQL Injection via ssf_tracking
Fixed in
Fixed in 7.11
CVSS
8.6 (high)
Published
2025-08-21
Title
Super Store Finder < 7.7 - Reflected Cross-Site Scripting
Fixed in
Fixed in 7.7
CVSS
7.1 (high)
Published
2025-08-21
Title
Super Store Finder <= 7.5 - Cross-Site Request Forgery
Fixed in
No known fix
CVSS
4.3 (medium)
Published
2025-07-31
Title
Super Store Finder < 7.6 - Unauthenticated SQL Injection
Fixed in
Fixed in 7.6
CVSS
7.5 (high)
Published
2025-07-07
Title
Super Store Finder < 6.8 - Unauthenticated Local File Inclusion
Fixed in
Fixed in 7.8
CVSS
8.1 (high)
Published
2025-04-17
Title
Super Store Finder < 7.5 - Unauthenticated SQL Injection
Fixed in
Fixed in 7.5
CVSS
7.5 (high)
Published
2025-02-08
Title
Super Store Finder < 7.1 - Unauthenticated SQL Injection to Stored Cross-Site Scripting
Fixed in
Fixed in 7.1
CVSS
8.2 (high)
Published
2024-08-28
Title
Super Store Finder < 6.9.8 - Authenticated (Subscriber+) SQL Injection
Fixed in
Fixed in 6.9.8
CVSS
9.9 (critical)
Published
2024-08-28
Title
Super Store Finder < 6.9.8 - Unauthenticated SQL Injection
Fixed in
Fixed in 6.9.8
CVSS
10 (critical)
Published
2024-08-28
Title
Super Store Finder < 6.9.8 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 6.9.8
CVSS
7.2 (high)
Published
2023-09-18
Title
Super Store Finder < 6.9.4 - Unauthenticated Email Creation/Sending
Fixed in
Fixed in 6.9.4
CVSS
5.8 (medium)
Published
2021-03-08
Title
SuperStoreFinder & SuperInteractiveMaps - Unauthenticated SQL Injections
Fixed in
Fixed in 6.5
CVSS
9.4 (critical)
Published
2020-10-21
Title
SuperStoreFinder Plugins - Unauthenticated Arbitrary File Upload
Fixed in
Fixed in 6.2
CVSS
10.0 (critical)