Wpexperts.Io WP Multistore Locator vulnerabilities

4 vulnerabilities

Known vulnerabilities in Wpexperts.Io WP Multistore Locator, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.3CVE-2025-26974wordpresswp-multi-store-locator+1
EPSS score
0.53%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPExperts.io WP Multistore Locator wp-multi-store-locator allows Blind SQL Injection.This issue affects WP Multistore Locator: from n/a through <= 2.5.1.4.3CVE-2025-31888wordpresswp-multi-store-locator+1
EPSS score
0.15%
Cross-Site Request Forgery (CSRF) vulnerability in WPExperts.io WP Multistore Locator wp-multi-store-locator allows Cross Site Request Forgery.This issue affects WP Multistore Locator: from n/a through <= 2.5.2.7.1CVE-2025-24680wordpresswp-multi-store-locator+2
EPSS score
0.26%
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in WPExperts.io WP Multistore Locator wp-multi-store-locator allows Reflected XSS.This issue affects WP Multistore Locator: from n/a through <= 2.4.7.9.3CVE-2025-28898wordpresswp-multi-store-locator+1
EPSS score
0.60%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPExperts.io WP Multistore Locator wp-multi-store-locator allows SQL Injection.This issue affects WP Multistore Locator: from n/a through <= 2.5.2.