AZEXO Store Locator vulnerabilities
We track 1 vulnerability in AZEXO Store Locator products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 9, 2026.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest AZEXO Store Locator vulnerabilities
- 8.8 High severity
AZEXO Store Locator: Unrestricted Upload of File with Dangerous Type
The AZEXO Store Locator WordPress plugin through 1.4 does not perform capability or nonce checks on its AJAX actions and does not sanitise a request header used to build a file path, allowing any authenticated user such as a subscriber to write a file with an