Skip to content
OpenAdvisories

Vendor

geolocationtechnology

1 known vulnerabilities.

Products

DocoDoco Store Locator 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.2
    CVE-2025-10754

    DocoDoco Store Locator <= 1.0.1 - Authenticated (Editor+) Arbitrary File Upload

    The DocoDoco Store Locator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the zip upload functionality in all versions up to, and including, 1.0.1. This makes it possible for authenticated attackers, with E…

    geolocationtechnology DocoDoco Store Locator Web / CMS