What’s Vulnerable › Products

Store Locator WordPress vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your Store Locator WordPress version is affected

Latest Store Locator WordPress vulnerabilities

• CVE-2026-9062 — Agile Store Locator < 1.6.9 - Admin+ Arbitrary File Read via Path Traversal (CVSS 3.4)
• CVE-2026-9061 — Agile Store Locator < 1.6.9 - Admin+ Stored XSS via logo_name (CVSS 3.5)
• CVE-2026-9060 — Agile Store Locator < 1.6.6 - Admin+ Stored XSS via map_style (CVSS 3.5)
• CVE-2023-50885 — WordPress Store Locator WordPress Plugin <= 1.4.14 is vulnerable to Arbitrary File Deletion (CVSS 6.8)
• CVE-2023-4151 — Store Locator WordPress < 1.4.13 - Reflected XSS (CVSS 6.1)
• CVE-2023-27618 — WordPress Store Locator WordPress Plugin <= 1.4.9 is vulnerable to Cross Site Scripting (XSS) (CVSS 4.8)
• CVE-2022-4832 — Store Locator WordPress < 1.4.9 - Contributor+ Stored XSS via Shortcode (CVSS 5.4)
• CVE-2022-41615 — WordPress Store Locator plugin <= 1.4.5 - Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerability (CVSS 6.1)