What’s Vulnerable › Products

highwarden Super Store Finder vulnerabilities

17 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.

Check whether your highwarden Super Store Finder version is affected

Latest highwarden Super Store Finder vulnerabilities

• CVE-2026-108541 — highwarden Super Store Finder index.php sql injection (CVSS 6.3)
• CVE-2026-81768 — WordPress Super Store Finder plugin <= 7.10 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2025-58939 — WordPress Super Store Finder plugin <= 7.5 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3)
• CVE-2025-47571 — WordPress Super Store Finder plugin < 7.8 - Local File Inclusion vulnerability (CVSS 7.5)
• CVE-2025-49413 — WordPress Super Store Finder Plugin <= 7.6 - Reflected Cross Site Scripting (XSS) Vulnerability (CVSS 7.1)
• CVE-2025-52720 — WordPress Super Store Finder Plugin <= 7.5 - SQL Injection Vulnerability (CVSS 9.3)
• CVE-2025-39445 — WordPress Super Store Finder <= 7.2 - SQL Injection Vulnerability (CVSS 9.3)
• CVE-2024-13440 — Super Store Finder <= 7.0 - Unauthenticated SQL Injection to Stored Cross-Site Scripting (CVSS 8.2)
• CVE-2024-43975 — WordPress Super Store Finder plugin <= 6.9.7 - Cross Site Scripting (XSS) vulnerability (CVSS 6.1)
• CVE-2024-43978 — WordPress Super Store Finder plugin < 6.9.8 - SQL Injection vulnerability (CVSS 9.8)
• CVE-2024-43976 — WordPress Super Store Finder plugin <= 6.9.7 - SQL Injection vulnerability (CVSS 9.8)
• CVE-2023-43835 — (CVSS 8.8)
• CVE-2023-44044 — (CVSS 7.2)
• CVE-2023-5054 — Super Store Finder <= 6.9.3 - Unauthenticated Email Creation/Sending (CVSS 5.3)
• CVE-2023-41507 — (CVSS 9.8)
• CVE-2023-41508 — (CVSS 9.8)
• CVE-2023-3751 — Super Store Finder POST Parameter index.php sql injection (CVSS 9.8)