agile-store-locator

WordPress · Plugin

11 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Agile Store Locator <= 1.6.8 - Authenticated (Admin+) Stored Cross-Site ScriptingCVE-2026-9061	agile-store-locator	WordPress	Medium	Fix reported	2026-09-18
Agile Store Locator <= 1.6.8 - Authenticated (Admin+) Arbitrary File ReadCVE-2026-9062	agile-store-locator	WordPress	Medium	Fix reported	2026-08-21
Store Locator WordPress < 1.6.6 - Authenticated (Administrator+) Stored Cross-Site ScriptingCVE-2026-9060	agile-store-locator	WordPress	Medium	Fix reported	2026-06-15
Store Locator WordPress <= 1.6.2 - Authenticated (Contributor+) SQL InjectionCVE-2025-67516	agile-store-locator	WordPress	Medium	Fix reported	2025-12-19
Store Locator WordPress <= 1.5.1 - Authenticated (Administrator+) SQL InjectionCVE-2025-49328	agile-store-locator	WordPress	Medium	Fix reported	2025-06-10
Store Locator WordPress <= 1.5.2 - Authenticated (Admin+) Arbitrary File UploadCVE-2025-49329	agile-store-locator	WordPress	High	Fix reported	2025-06-10
Store Locator WordPress <= 1.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2022-4832	agile-store-locator	WordPress	Medium	Fix reported	2024-01-22
Store Locator WordPress <= 1.4.14 - Authenticated(Administrator+) Directory Traversal to Arbitrary File DeletionCVE-2023-50885	agile-store-locator	WordPress	Medium	Fix reported	2024-01-22
Store Locator WordPress <= 1.4.5 - Cross-Site Request Forgery to Cross-Site ScriptingCVE-2022-41615	agile-store-locator	WordPress	High	Fix reported	2024-01-22
Store Locator WordPress <= 1.4.12 - Reflected Cross-Site Scripting via 'asl-nounce'CVE-2023-4151	agile-store-locator	WordPress	Medium	Fix reported	2024-01-22
Store Locator WordPress <= 1.4.9 - Authenticated (Editor+) Stored Cross-Site Scripting via 'category_name', 'description', 'description_2' parametersCVE-2023-27618	agile-store-locator	WordPress	Medium	Fix reported	2024-01-22