Skip to content
OpenAdvisories

Product · WPExperts.io

WP Multi Store Locator Pro

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.5

    WP Multi Store Locator Pro <= 4.5.1 - Unauthenticated SQL Injection via 'store_locator_search_radius' Parameter

    The WP Multi Store Locator Pro plugin for WordPress is vulnerable to generic SQL Injection via the 'store_locatore_search_radius' parameter in all versions up to, and including, 4.5.1 due to insufficient escaping on the user supplied parameter and lack of suf…