Description
Unauthenticated SQL Injection in Locatoraid Store Locator <= 3.9.72 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| plainware | Locatoraid Store Locator | ≤ 3.9.72 | — |
Critical · 9.3
CVE-2026-66680
EUVD-2026-63306GHSA-g53f-mwgr-88rp
WordPress Locatoraid Store Locator plugin <= 3.9.72 - SQL Injection vulnerability
Published Aug 20, 2026 · Updated Aug 20, 2026 · Assigned by Patchstack