WP Multistore Locator vulnerabilities | LiveThreat CVE Feed

Product

WP Multistore Locator

by WPExperts.io · last CVE Apr 1, 2025

CVEs

On KEV

9.3

Max CVSS

New 30D

Severity mix

Critical 2High 0Medium 2Low 0

Severity

Exploitation

Watch

Add WP Multistore Locator to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-28898	9.3	1%	Mar 26	WordPress WP Multistore Locator plugin <= 2.5.2 - SQL Injection vulnerability Affected: through 2.5.2
CVE-2025-26974	9.3	1%	Feb 25	WordPress WP Multi Store Locator plugin <= 2.5.1 - SQL Injection vulnerability Affected: through 2.5.1
CVE-2025-24680	6.1	0%	Jan 27	WordPress WP Multi Store Locator Plugin <= 2.4.7 - Cross Site Scripting (XSS) vulnerability Affected: through 2.4.7
CVE-2025-31888	4.3	0%	Apr 1	WordPress WP Multi Store Locator Plugin <= 2.5.2 - Cross Site Request Forgery (CSRF) vulnerability Affected: through 2.5.2