Access violation vulnerability in Store Locator Plus® for WordPress 4.2.27

The Store Locator Plus plugin for WordPress is a tool that helps people find stores located near them. Unfortunately, this plugin has a security vulnerability that could potentially allow attackers to send spam emails from a fake address. This vulnerability affects all versions of the plugin up to and including version 4.2.27. It is caused by a security issue called “nonce leakage” which makes it possible for attackers to bypass security measures. To protect yourself, you should make sure you are running the most up-to-date version of the plugin.