Skip to main content

Store Locator Project

3 CVEs product

Monthly

CVE-2025-3737 Apr 16, 17:15 PHP MEDIUM This Month

Vulnerability in Drupal Google Maps: Store Locator.*. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable. No vendor patch available.

Information Disclosure Google Drupal Store Locator Project Google Maps
NVD
CVSS 3.1
5.9
EPSS
0.2%
CVE-2014-8621 Oct 16, 15:29 CRITICAL POC Act Now

SQL injection vulnerability in the Store Locator plugin 2.3 through 3.11 for WordPress allows remote attackers to execute arbitrary SQL commands via the sl_custom_field parameter to sl-xml.php. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP WordPress SQLi Store Locator Project Store Locator
NVD
CVSS 3.0
9.8
EPSS
2.5%
CVE-2015-4610 Jun 16, 16:59 MEDIUM PATCH This Month

SQL injection vulnerability in the Store Locator (locator) extension before 3.3.1 for TYPO3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

SQLi Store Locator Project Store Locator
NVD
CVSS 2.0
6.5
EPSS
0.4%
EPSS 0% CVSS 5.9
MEDIUM This Month

Vulnerability in Drupal Google Maps: Store Locator.*. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable. No vendor patch available.

Information Disclosure Google Drupal +2
NVD
EPSS 3% CVSS 9.8
CRITICAL POC Act Now

SQL injection vulnerability in the Store Locator plugin 2.3 through 3.11 for WordPress allows remote attackers to execute arbitrary SQL commands via the sl_custom_field parameter to sl-xml.php. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP WordPress SQLi +2
NVD
EPSS 0% CVSS 6.5
MEDIUM PATCH This Month

SQL injection vulnerability in the Store Locator (locator) extension before 3.3.1 for TYPO3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

SQLi Store Locator Project Store Locator
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy