Skip to content
OpenAdvisories

Vendor

Tijmen Smit

3 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 5.9

    WordPress WP Store Locator plugin < 3.0.0 - Denial of Service Attack vulnerability

    Unauthenticated Denial of Service Attack in WP Store Locator < 3.0.0 versions.

  • Medium 6.4

    WP Store Locator <= 2.2.261 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wpsl_address' Post Meta

    The WP Store Locator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wpsl_address' post meta value in versions up to, and including, 2.2.261 due to insufficient input sanitization and output escaping. This makes it possible for auth…