Superstorefinder vulnerabilities
We track 5 vulnerabilities in Superstorefinder products across 2 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on September 17, 2024.
Latest Superstorefinder vulnerabilities
- 9.8 Critical severity
Super Store Finder: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in highwarden Super Store Finder superstorefinder-wp.This issue affects Super Store Finder: from n/a through < 6.9.8.
- 9.8 Critical severity
Super Store Finder: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in highwarden Super Store Finder superstorefinder-wp.This issue affects Super Store Finder: from n/a through <= 6.9.7.
- 8.8 High severity
Super Store Finder: Improper Neutralization of Special Elements in Output Used by a Downstream Component
Super Store Finder 3.7 and below is vulnerable to authenticated Arbitrary PHP Code Injection that could lead to Remote Code Execution when settings overwrite config.inc.php content.
- 9.8 Critical severity
PHP Script: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in Super Store Finder PHP Script v.3.6 allows a remote attacker to execute arbitrary code via a crafted payload to the username parameter.
- 9.8 Critical severity
Super Store Finder: Improper Neutralization of Special Elements used in an SQL Command
Super Store Finder v3.6 was discovered to contain multiple SQL injection vulnerabilities in the store locator component via the products, distance, lat, and lng parameters.