« Back to list

Docodoco

Docodoco Store Locator: vulnerabilities and CVEs

Docodoco Store Locator has 1 published vulnerabilities, 1 of them in the last 12 months. 0 are rated critical and 0 are listed by CISA as actively exploited.

CVEs1
Last 12 months1
Critical0
Actively exploited0

All vulnerabilities in the catalogue →⭐ Follow this technology

Latest vulnerabilities

CVESeverityEPSSActive exploitationPublishedDescription
CVE-2025-10754High (7.2)0.69%—Oct 15, 2025
The DocoDoco Store Locator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the zip upload functionality in all versions up to, and including, 1.0.1. This makes it…

🎯 How it gets exploited (ATT&CK techniques)

  1. T1210 Exploitation of Remote Services1
  2. T1505.003 Web Shell1

Number of CVEs of this technology mapped to each exploitation or primary-impact technique.