Skip to content
OpenAdvisories

Archive

13 June 2026

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Low 3.4
    CVE-2026-9062 Scanner template

    Agile Store Locator < 1.6.9 - Admin+ Arbitrary File Read via Path Traversal

    The Store Locator WordPress plugin before 1.6.9 does not validate a parameter before using it in a file path, allowing high-privileged users such as administrators to read arbitrary `.php` files from the server, including configuration files that contain data…

  • Low 3.5

    Agile Store Locator < 1.6.9 - Admin+ Stored XSS via logo_name

    The Store Locator WordPress plugin before 1.6.9 does not sanitize and escape store logo metadata before storing it and outputting it on the Store Locator WordPress plugin before 1.6.9 admin page, allowing high-privileged users such as administrators to perfor…