Highwarden vulnerabilities

We track 8 vulnerabilities in Highwarden products across 3 products. 8 are rated high or critical, and none are known to be exploited. The most recent was published on January 22, 2026.

8vulnerabilities

4critical

4high

0exploited

8.4average CVSS score

Latest Highwarden vulnerabilities

7.1 High severity
Super Logos Showcase: Improper Neutralization of Input During Web Page Generation
CVE-2025-69054Jan 22, 2026Highwarden
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in highwarden Super Logos Showcase superlogoshowcase-wp allows Reflected XSS.This issue affects Super Logos Showcase: from n/a through <= 2.8.
7.1 High severity
Super Interactive Maps: Improper Neutralization of Input During Web Page Generation
CVE-2025-49045Jan 22, 2026Highwarden
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in highwarden Super Interactive Maps super-interactive-maps allows Reflected XSS.This issue affects Super Interactive Maps: from n/a through <= 2.3.
7.5 High severity
Super Store Finder: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-47571Sep 9, 2025Highwarden
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in highwarden Super Store Finder superstorefinder-wp allows PHP Local File Inclusion.This issue affects Super Store Finder: from n/a through <
7.1 High severity
Super Store Finder: Improper Neutralization of Input During Web Page Generation
CVE-2025-49413Aug 20, 2025Highwarden
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in highwarden Super Store Finder superstorefinder-wp allows Reflected XSS.This issue affects Super Store Finder: from n/a through <= 7.6.
9.3 Critical severity
Super Store Finder: Improper Neutralization of Special Elements used in an SQL Command
CVE-2025-52720Aug 14, 2025Highwarden
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in highwarden Super Store Finder superstorefinder-wp allows SQL Injection.This issue affects Super Store Finder: from n/a through <= 7.5.
9.3 Critical severity
Super Store Finder: Improper Neutralization of Special Elements used in an SQL Command
CVE-2025-39445May 19, 2025Highwarden
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in highwarden Super Store Finder superstorefinder-wp allows SQL Injection.This issue affects Super Store Finder: from n/a through <= 7.2.
9.8 Critical severity
Super Store Finder: Improper Neutralization of Special Elements used in an SQL Command
CVE-2024-43978Sep 17, 2024Highwarden
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in highwarden Super Store Finder superstorefinder-wp.This issue affects Super Store Finder: from n/a through < 6.9.8.
9.8 Critical severity
Super Store Finder: Improper Neutralization of Special Elements used in an SQL Command
CVE-2024-43976Sep 17, 2024Highwarden
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in highwarden Super Store Finder superstorefinder-wp.This issue affects Super Store Finder: from n/a through <= 6.9.7.