WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
store-locator
Published
2024-12-19
Title
Store Locator <= 3.98.10 - Unauthenticated Local File Inclusion
Slug
store-locator
Published
2025-01-16
Title
Store Locator for WordPress with Google Maps – LotsOfLocales <= 3.98.10 - Unauthenticated Local File Inclusion
Slug
store-locator-le
Published
2014-08-01
Title
Google Maps via Store Locator - Multiple Vulnerabilities
Slug
store-locator-le
Published
2014-08-01
Title
store-locator-le - SQL Injection
Slug
store-locator-le
Published
2015-01-17
Title
Store Locator Plus 4.2.23 - Email Injection
Slug
store-locator-le
Published
2016-08-05
Title
Store Locator Plus for WordPress <= 4.5.10 - Authenticated Cross-Site Scripting (XSS)
Slug
store-locator-le
Published
2021-04-26
Title
Store Locator Plus < 5.9 - Unauthenticated Stored XSS
Slug
store-locator-le
Published
2021-04-26
Title
Store Locator Plus < 5.9 - Authenticated Privilege Escalation
Slug
store-locator-le
Published
2024-08-12
Title
Store Locator Plus <= 2311.17.01 - Unauthenticated Sensitive Information Exposure
Slug
store-locator-widget
Published
2025-02-18
Title
Store Locator Widget < 2025r2 - Contributor+ Stored XSS
Slug
store-locator-widget
Published
2025-03-27
Title
Store Locator Widget < 2025r3r2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
store-manager-connector
Published
2025-05-23
Title
eMagicOne Store Manager for WooCommerce < 1.3.0 - Unauthenticated Arbitrary File Read
Slug
store-manager-connector
Published
2025-05-23
Title
eMagicOne Store Manager for WooCommerce < 1.3.0 - Unauthenticated Arbitrary File Deletion
Slug
store-manager-connector
Published
2025-05-23
Title
eMagicOne Store Manager for WooCommerce < 1.3.0 - Unauthenticated Arbitrary File Upload via set_file()
Slug
store-manager-connector
Published
2025-05-23
Title
eMagicOne Store Manager for WooCommerce < 1.3.0 - Unauthenticated Arbitrary File Upload via set_image()
Slug
storecontrl-wp-connection
Published
2025-04-17
Title
StoreContrl Woocommerce < 4.1.4 - Unauthenticated Arbitrary File Download
Slug
storeengine
Published
2025-09-16
Title
StoreEngine – Powerful WordPress eCommerce Plugin for Payments, Memberships, Affiliates, Sales & More < 1.5.1 - Authenticated (Subscriber+) Arbitrary File Download
Slug
storeengine
Published
2025-09-16
Title
StoreEngine – Powerful WordPress eCommerce Plugin for Payments, Memberships, Affiliates, Sales & More < 1.5.1 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
storefront-footer-text
Published
2021-10-11
Title
Storefront Footer Text <= 1.0.1 - Admin+ Stored Cross-Site Scripting
Slug
storekeeper-for-woocommerce
Published
2025-05-09
Title
StoreKeeper for WooCommerce < 14.4.5 - Unauthenticated Arbitrary File Upload
Slug
storekeeper-for-woocommerce
Published
2025-07-31
Title
StoreKeeper for WooCommerce < 14.4.5 - Unauthenticated Arbitrary File Upload
Slug
story-chief
Published
2021-08-02
Title
StoryChief < 1.0.31 - Reflected Cross-Site Scripting (XSS)
Slug
story-chief
Published
2021-08-02
Title
StoryChief < 1.0.31 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
story-chief
Published
2025-08-15
Title
StoryChief < 1.0.43 - Unauthenticated Arbitrary File Upload
Slug
stout-google-calendar
Published
2023-10-16
Title
Stout Google Calendar <= 1.2.3 - Arbitrary Settings Update via CSRF