Skip to content
OpenAdvisories
Medium · 6.1 CVE-2022-41615 EUVD-2022-44806GHSA-jggh-gg48-r3hf

WordPress Store Locator plugin <= 1.4.5 - Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerability

Published Nov 18, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Agile Logix Product: Store Locator WordPress (WordPress plugin) Category: Web / CMS

Description

Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerability in Store Locator plugin <= 1.4.5 on WordPress.

Affected products

VendorProductAffectedFixed
AGILELOGIX Store Locator WordPress (WordPress plugin) <= 1.4.5 – ≤ 1.4.5 —

References