Skip to content
OpenAdvisories

Vendor

Super Store Finder

2 known vulnerabilities.

Products

Super Store Finder 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.2
    CVE-2024-13440

    Super Store Finder <= 7.0 - Unauthenticated SQL Injection to Stored Cross-Site Scripting

    The Super Store Finder plugin for WordPress is vulnerable to SQL Injection via the ‘ssf_wp_user_name’ parameter in all versions up to, and including, 7.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the exi…

    Super Store Finder Super Store Finder Web / CMS