CVE Intelligence

Plainware Locatoraid Store Locator vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Plainware Locatoraid Store Locator: 2 record(s), with affected versions and fixes.

CVE-2026-66680 Critical · 9.3 CWE-89 Aug 20, 2026
WordPress Locatoraid Store Locator plugin <= 3.9.72 - SQL Injection vulnerability
Unauthenticated SQL Injection in Locatoraid Store Locator <= 3.9.72 versions.
CVE-2025-62140 Medium · 5.9 CWE-79 Dec 31, 2025
WordPress Locatoraid Store Locator plugin <= 3.9.68 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in plainware Locatoraid Store Locator locatoraid allows Stored XSS.This issue affects Locatoraid Store Locator: from n/a through <= 3.9.68.