Login Request a demo
SS
Product
Super Store Finder
by Superstorefinder · last CVE Feb 9, 2025
10
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities10In the news0Timeline
Severity mix
Critical 5High 3Medium 2Low 0
Severity
All severities10Critical5High3Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Super Store Finder to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-43976
9.8
0%
Sep 17
WordPress Super Store Finder plugin <= 6.9.7 - SQL Injection vulnerability
Affected: before 6.9.8
CVE-2024-43978
9.8
0%
Sep 17
WordPress Super Store Finder plugin < 6.9.8 - SQL Injection vulnerability
Affected: before 6.9.8
CVE-2023-41508
9.8
1%
Sep 5
A hard coded password in Super Store Finder v3.6 allows attackers to access the administration panel
Affected: 3.6
CVE-2023-41507
9.8
1%
Sep 5
Super Store Finder v3.6 was discovered to contain multiple SQL injection vulnerabilities in the store locator component via the products, distance, lat, and lng parameters
Affected: 3.6
CVE-2023-3751
9.8
0%
Jul 19
Super Store Finder POST Parameter index.php sql injection
Affected: 3.6
CVE-2023-43835
8.8
2%
Oct 2
Super Store Finder 3.7 and below is vulnerable to authenticated Arbitrary PHP Code Injection that could lead to Remote Code Execution when settings overwrite config.inc.php…
Affected: through 3.7
CVE-2024-13440
8.2
0%
Feb 9
Super Store Finder <= 7.0 - Unauthenticated SQL Injection to Stored Cross-Site Scripting
Affected: before 7.1
CVE-2023-44044
7.2
1%
Sep 26
Super Store Finder v3.6 and below was discovered to contain a SQL injection vulnerability via the Search parameter at /admin/stores.php
Affected: through 3.6
CVE-2024-43975
6.1
0%
Sep 17
WordPress Super Store Finder plugin <= 6.9.7 - Cross Site Scripting (XSS) vulnerability
Affected: through 6.9.7
CVE-2023-5054
5.3
1%
Sep 19
Super Store Finder <= 6.9.3 - Unauthenticated Email Creation/Sending
Affected: through 6.9.2
Showing 10