Log out
Get PRO

Latest

Input validation vulnerability in Store Locator for WordPress with Google Maps – LotsOfLocales 3.34

  • Severity: critical
  • Status: Open
  • Publication: February 9, 2015

The Store Locator Plugin for WordPress is a piece of software that allows users to set up a store locator on their website. However, versions of the plugin released before 3.34 are vulnerable to a type of attack called “blind SQL Injection”. This attack works by taking advantage of the plugin’s insufficient security measures to gain access to sensitive information stored in the website’s database. Unauthenticated attackers can use this vulnerability to gain access to this information.

Detected in:

Store Locator for WordPress with Google Maps – LotsOfLocales open vulnerable versions: >= * < 3.34

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.