What’s Vulnerable › Products

plainware Locatoraid Store Locator vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your plainware Locatoraid Store Locator version is affected

Latest plainware Locatoraid Store Locator vulnerabilities

• CVE-2026-66680 — WordPress Locatoraid Store Locator plugin <= 3.9.72 - SQL Injection vulnerability (CVSS 9.3)
• CVE-2025-62140 — WordPress Locatoraid Store Locator plugin <= 3.9.68 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9)
• CVE-2024-56283 — WordPress Locatoraid Store Locator Plugin <= 3.9.50 - PHP Object Injection vulnerability (CVSS 8.1)
• CVE-2024-9652 — Locatoraid Store Locator <= 3.9.47 - Reflected Cross-Site Scripting (CVSS 6.1)
• CVE-2024-30181 — WordPress Locatoraid Store Locator plugin <= 3.9.30 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9)
• CVE-2023-4476 — Locatoraid Store Locator < 3.9.24 - Reflected XSS (CVSS 6.1)
• CVE-2023-2031 — Locatoraid Store Locator <= 3.9.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 5.4)
• CVE-2023-25709 — WordPress Locatoraid Store Locator Plugin <= 3.9.11 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 8.8)