SU
Vendor
Superstorefinder
11
CVEs
0
On KEV
0
New 30D
Products
SS9.8
Super Store Finder
Superstorefinder
10 CVEs0 on KEV0 new
PS9.8
Php Script
Superstorefinder
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-13440 | SS Super Store Finder Superstorefinder | 8.2 | Feb 9 | Super Store Finder <= 7.0 - Unauthenticated SQL Injection to Stored Cross-Site Scripting |
| CVE-2024-43975 | SS Super Store Finder Superstorefinder | 6.1 | Sep 17 | WordPress Super Store Finder plugin <= 6.9.7 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-43976 | SS Super Store Finder Superstorefinder | 9.8 | Sep 17 | WordPress Super Store Finder plugin <= 6.9.7 - SQL Injection vulnerability |
| CVE-2024-43978 | SS Super Store Finder Superstorefinder | 9.8 | Sep 17 | WordPress Super Store Finder plugin < 6.9.8 - SQL Injection vulnerability |
| CVE-2023-43835 | SS Super Store Finder Superstorefinder | 8.8 | Oct 2 | Super Store Finder 3.7 and below is vulnerable to authenticated Arbitrary PHP Code Injection that could lead to Remote Code Execution when settings overwrite config.inc.php… |
| CVE-2023-44044 | SS Super Store Finder Superstorefinder | 7.2 | Sep 26 | Super Store Finder v3.6 and below was discovered to contain a SQL injection vulnerability via the Search parameter at /admin/stores.php |
| CVE-2023-5054 | SS Super Store Finder Superstorefinder | 5.3 | Sep 19 | Super Store Finder <= 6.9.3 - Unauthenticated Email Creation/Sending |
| CVE-2023-38912 | PS Php Script Superstorefinder | 9.8 | Sep 14 | SQL injection vulnerability in Super Store Finder PHP Script v.3.6 allows a remote attacker to execute arbitrary code via a crafted payload to the username parameter |
| CVE-2023-41507 | SS Super Store Finder Superstorefinder | 9.8 | Sep 5 | Super Store Finder v3.6 was discovered to contain multiple SQL injection vulnerabilities in the store locator component via the products, distance, lat, and lng parameters |
| CVE-2023-41508 | SS Super Store Finder Superstorefinder | 9.8 | Sep 5 | A hard coded password in Super Store Finder v3.6 allows attackers to access the administration panel |
| CVE-2023-3751 | SS Super Store Finder Superstorefinder | 9.8 | Jul 19 | Super Store Finder POST Parameter index.php sql injection |