Superstorefinder
Superstorefinder Super Store Finder: vulnerabilidades y CVE
Superstorefinder Super Store Finder tiene 17 vulnerabilidades publicadas, 3 de ellas en los últimos 12 meses. 8 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE17
Últimos 12 meses3
Críticas8
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-81768 | Alta (7.1) | 0.25% | — | 31 ago 2026 | Unauthenticated Cross Site Scripting (XSS) in Super Store Finder <= 7.10 versions. |
| CVE-2026-12965 | Crítica (9.1) | 0.46% | — | 3 ago 2026 | The Super Store Finder WordPress plugin before 7.11 does not sanitize a parameter of an unauthenticated AJAX action before using it in a SQL query, allowing unauthenticated attackers to perform SQL injection and extract… |
| CVE-2025-58939 | Media (4.3) | 0.14% | — | 29 oct 2025 | Cross-Site Request Forgery (CSRF) vulnerability in highwarden Super Store Finder superstorefinder-wp allows Cross Site Request Forgery.This issue affects Super Store Finder: from n/a through <= 7.5. |
| CVE-2025-47571 | Alta (7.5) | 0.46% | — | 9 sept 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in highwarden Super Store Finder superstorefinder-wp allows PHP Local File Inclusion.This issue… |
| CVE-2025-49413 | Alta (7.1) | 0.25% | — | 20 ago 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in highwarden Super Store Finder superstorefinder-wp allows Reflected XSS.This issue affects Super Store Finder: from… |
| CVE-2025-52720 | Crítica (9.3) | 0.29% | — | 14 ago 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in highwarden Super Store Finder superstorefinder-wp allows SQL Injection.This issue affects Super Store Finder: from… |
| CVE-2025-39445 | Crítica (9.3) | 0.35% | — | 19 may 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in highwarden Super Store Finder superstorefinder-wp allows SQL Injection.This issue affects Super Store Finder: from… |
| CVE-2024-13440 | Alta (7.5) | 0.39% | — | 9 feb 2025 | The Super Store Finder plugin for WordPress is vulnerable to SQL Injection via the ‘ssf_wp_user_name’ parameter in all versions up to, and including, 7.0 due to insufficient escaping on the user supplied parameter and… |
| CVE-2024-43975 | Media (6.1) | 0.27% | — | 18 sept 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in highwarden Super Store Finder superstorefinder-wp.This issue affects Super Store Finder: from n/a through <= 6.9.7. |
| CVE-2024-43978 | Crítica (9.8) | 0.46% | — | 17 sept 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in highwarden Super Store Finder superstorefinder-wp.This issue affects Super Store Finder: from n/a through < 6.9.8. |
| CVE-2024-43976 | Crítica (9.8) | 0.46% | — | 17 sept 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in highwarden Super Store Finder superstorefinder-wp.This issue affects Super Store Finder: from n/a through <= 6.9.7. |
| CVE-2023-43835 | Alta (8.8) | 1.7% | — | 2 oct 2023 | Super Store Finder 3.7 and below is vulnerable to authenticated Arbitrary PHP Code Injection that could lead to Remote Code Execution when settings overwrite config.inc.php content. |
| CVE-2023-44044 | Alta (7.2) | 1.0% | — | 27 sept 2023 | Super Store Finder v3.6 and below was discovered to contain a SQL injection vulnerability via the Search parameter at /admin/stores.php. |
| CVE-2023-5054 | Media (5.3) | 0.64% | — | 19 sept 2023 | The Super Store Finder plugin for WordPress is vulnerable to unauthenticated arbitrary email creation and relay in versions up to, and including, 6.9.3. This is due to insufficient restrictions on the sendMail.php file… |
| CVE-2023-41507 | Crítica (9.8) | 0.99% | — | 5 sept 2023 | Super Store Finder v3.6 was discovered to contain multiple SQL injection vulnerabilities in the store locator component via the products, distance, lat, and lng parameters. |
| CVE-2023-41508 | Crítica (9.8) | 1.4% | — | 5 sept 2023 | A hard coded password in Super Store Finder v3.6 allows attackers to access the administration panel. |
| CVE-2023-3751 | Crítica (9.8) | 0.50% | — | 19 jul 2023 | A vulnerability was found in Super Store Finder 3.6. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /index.php of the component POST Parameter Handler. The… |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.