What’s Vulnerable › Products

WPExperts.io WP Multistore Locator vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your WPExperts.io WP Multistore Locator version is affected

Latest WPExperts.io WP Multistore Locator vulnerabilities

• CVE-2025-31888 — WordPress WP Multi Store Locator Plugin <= 2.5.2 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3)
• CVE-2025-28898 — WordPress WP Multistore Locator plugin <= 2.5.2 - SQL Injection vulnerability (CVSS 9.3)
• CVE-2025-26974 — WordPress WP Multi Store Locator plugin <= 2.5.1 - SQL Injection vulnerability (CVSS 9.3)
• CVE-2025-24680 — WordPress WP Multi Store Locator Plugin <= 2.4.7 - Cross Site Scripting (XSS) vulnerability (CVSS 6.1)
• CVE-2024-12475 — WP Multi Store Locator <= 2.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 5.4)
• CVE-2023-0152 — WP Multi Store Locator <= 2.4 - Contributor+ Stored XSS (CVSS 5.4)