Skip to content
OpenAdvisories
High · 7.5 CVE-2025-23422 EUVD-2025-3170GHSA-rr7g-g6mc-fp64

WordPress Store Locator plugin <= 3.98.10 - Local File Inclusion vulnerability

Published Jan 24, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in moaluko Store Locator store-locator allows PHP Local File Inclusion.This issue affects Store Locator: from n/a through <= 3.98.10.

Affected products

VendorProductAffectedFixed
moaluko Store Locator ≤ 3.98.10 —

References