WP Multistore Locator vulnerabilities

2 known vulnerabilities in WP Multistore Locator from WPExperts.io. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.3 Critical severity

  WP Multistore Locator: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-28898Mar 26, 2025WPExperts.io

  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPExperts.io WP Multistore Locator wp-multi-store-locator allows SQL Injection.This issue affects WP Multistore Locator: from n/a through <= 2.5.2.

• 9.3 Critical severity

  WP Multistore Locator: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-26974Feb 25, 2025WPExperts.io

  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPExperts.io WP Multistore Locator wp-multi-store-locator allows Blind SQL Injection.This issue affects WP Multistore Locator: from n/a through <= 2.5.1.