Skip to content
OpenAdvisories

Vendor

WPExperts.io

12 known vulnerabilities.

Products

WP Multistore Locator 4 WC Shop Sync – Integrate Square and WooCommerce for Seamless Shop Management 1 WP Multistore Locator — WP Store Locator Plugin: Effortless Integration With Snazzy Maps 1 WP PDF Generator 1 APIExperts Square for WooCommerce 1 Email Templates Customizer and Designer for WordPress and WooCommerce 1 New User Approve 1 WP Multi Store Locator Pro 1 Rocket Maintenance Mode & Coming Soon Page 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2026-15275

    WP Multi Store Locator Pro <= 4.5.1 - Unauthenticated SQL Injection via 'store_locator_search_radius' Parameter

    The WP Multi Store Locator Pro plugin for WordPress is vulnerable to generic SQL Injection via the 'store_locatore_search_radius' parameter in all versions up to, and including, 4.5.1 due to insufficient escaping on the user supplied parameter and lack of suf…

    WPExperts.io WP Multi Store Locator Pro Web / CMS
  • High 7.1
    CVE-2025-24680

    WordPress WP Multi Store Locator Plugin <= 2.4.7 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in WPExperts.io WP Multistore Locator wp-multi-store-locator allows Reflected XSS.This issue affects WP Multistore Locator: from n/a through <= 2.4.7.

    WPExperts.io WP Multistore Locator
  • High 7.1
    CVE-2024-27959

    WordPress APIExperts Square for WooCommerce plugin <= 4.2.9 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wpexpertsio WC Shop Sync – Integrate Square and WooCommerce for Seamless Shop Management allows Reflected XSS.This issue affects WC Shop Sync – Integrate Squ…

    WPExperts.io WC Shop Sync – Integrate Square and WooCommerce for Seamless Shop Management Web / CMS