Vulnerabilities (CVE)

Filtered by vendor Store Locator Project Subscribe
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2014-8621 1 Store Locator Project 1 Store Locator 2023-12-10 7.5 HIGH 9.8 CRITICAL
SQL injection vulnerability in the Store Locator plugin 2.3 through 3.11 for WordPress allows remote attackers to execute arbitrary SQL commands via the sl_custom_field parameter to sl-xml.php.
CVE-2015-4610 1 Store Locator Project 1 Store Locator 2023-12-10 6.5 MEDIUM N/A
SQL injection vulnerability in the Store Locator (locator) extension before 3.3.1 for TYPO3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.