Description
The Super Store Finder WordPress plugin before 7.11 does not sanitize a parameter of an unauthenticated AJAX action before using it in a SQL query, allowing unauthenticated attackers to perform SQL injection and extract data from the database.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Super Store Finder WordPress | < 7.11 | 7.11 |
References
- https://wpscan.com/vulnerability/fd13bf8a-ce99-4e2b-ba36-e899df33cf98/ exploit vdb-entry technical-description