Skip to content
OpenAdvisories
High · 7.6 CVE-2025-32128 EUVD-2025-10483GHSA-cg22-jcvj-c26m

WordPress Nearby Locations Plugin <= 1.1.1 - SQL Injection vulnerability

Published Apr 10, 2025 · Updated May 12, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in aaronfrey Nearby Locations nearby-locations allows SQL Injection.This issue affects Nearby Locations: from n/a through <= 1.1.1.

Affected products

VendorProductAffectedFixed
aaronfrey Nearby Locations ≤ 1.1.1 —

References