Plainware vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Plainware products: 1 record(s), with severity, exploitation and fixes.

Locatoraid Store Locator 1

Exploited only (KEV) →

CVE-2025-62140 Medium · 5.9 CWE-79 Dec 31, 2025

WordPress Locatoraid Store Locator plugin <= 3.9.68 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in plainware Locatoraid Store Locator locatoraid allows Stored XSS.This issue affects Locatoraid Store Locator: from n/a through <= 3.9.68.