Super Store Finder Super Store Finder

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

10CVEs

CVE-2023-41508

A hard coded password in Super Store Finder v3.6 allows attackers to access the administration panel.

Published 2023-09-05 · Modified

9.8EPSS 0.014

CVE-2023-41507

Super Store Finder v3.6 was discovered to contain multiple SQL injection vulnerabilities in the store locator component via the products, distance, lat, and lng parameters.

Published 2023-09-05 · Modified

9.8EPSS 0.010

CVE-2023-3751

Super Store Finder POST Parameter index.php sql injection

Published 2023-07-19 · Modified

9.8EPSS 0.005

CVE-2024-43976

WordPress Super Store Finder plugin <= 6.9.7 - SQL Injection vulnerability

Published 2024-09-17 · Modified

9.8EPSS 0.005

CVE-2024-43978

WordPress Super Store Finder plugin < 6.9.8 - SQL Injection vulnerability

Published 2024-09-17 · Modified

9.8EPSS 0.005

CVE-2023-43835

Super Store Finder 3.7 and below is vulnerable to authenticated Arbitrary PHP Code Injection that could lead to Remote Code Execution when settings overwrite config.inc.php content.

Published 2023-10-02 · Modified

8.8EPSS 0.014

CVE-2024-13440

Super Store Finder <= 7.0 - Unauthenticated SQL Injection to Stored Cross-Site Scripting

Published 2025-02-09 · Modified

8.2EPSS 0.004

CVE-2023-44044

Super Store Finder v3.6 and below was discovered to contain a SQL injection vulnerability via the Search parameter at /admin/stores.php.

Published 2023-09-26 · Modified

7.2EPSS 0.009

CVE-2024-43975

WordPress Super Store Finder plugin <= 6.9.7 - Cross Site Scripting (XSS) vulnerability