Wp Multi Store Locator Pro
Monthly
Unauthenticated SQL injection in WP Multi Store Locator Pro, affecting all versions up to and including 4.5.1, lets any anonymous visitor append arbitrary SQL to the plugin's store search query and read sensitive data from the underlying WordPress database, including user credential hashes and other plugin or core records. The vulnerable entry point is the store_locatore_search_radius parameter, handled by an AJAX action registered on wp_ajax_nopriv_make_search_request with no nonce or capability check, so the only prerequisite is that the plugin is installed and active on a default WordPress site. No public exploit identified at time of analysis and the issue is not listed in CISA KEV; exploitation intelligence is thin, but the code path is trivially reachable and the numeric, unquoted SQL context defeats WordPress's addslashes-based request sanitization, which supports the assessed CVSS 7.5 (C:H, no integrity or availability impact).
Unauthenticated SQL injection in WP Multi Store Locator Pro, affecting all versions up to and including 4.5.1, lets any anonymous visitor append arbitrary SQL to the plugin's store search query and read sensitive data from the underlying WordPress database, including user credential hashes and other plugin or core records. The vulnerable entry point is the store_locatore_search_radius parameter, handled by an AJAX action registered on wp_ajax_nopriv_make_search_request with no nonce or capability check, so the only prerequisite is that the plugin is installed and active on a default WordPress site. No public exploit identified at time of analysis and the issue is not listed in CISA KEV; exploitation intelligence is thin, but the code path is trivially reachable and the numeric, unquoted SQL context defeats WordPress's addslashes-based request sanitization, which supports the assessed CVSS 7.5 (C:H, no integrity or availability impact).