Input validation vulnerability in Store Locator for WordPress with Google Maps – LotsOfLocales 3.98.7

The Store Locator plugin for WordPress is vulnerable to a security issue. This issue exists in all versions up to version 3.98.7 and is caused by missing or incorrect validation when updating settings. This means that if an unauthenticated attacker can trick an administrator into performing an action, such as clicking a link, they can change the plugin settings using a fake request.

Detected in:

Store Locator for WordPress with Google Maps – LotsOfLocales open vulnerable versions: >= * <= 3.98.7

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.