Store Locator Plus
Approved changes feed: RSS · Atom
cpe:2.3:a:de-baat:store_locator_plus:*:*:*:*:*:wordpress:*:*
part: a version: * update: *
| Vendor | De Baat (d5e16470-54d3-56dc-b7b2-b781692d4ec7) |
|---|---|
| Product | Store Locator Plus (3de3a729-68b6-5ef0-9f1a-0c1981980cbf) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/wpplugins/store-locator-plus |
purl2cpe | 2026-06-01 10:13:02.393144 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-24290 |
vulnerable | 2026-06-08 05:30:04.125955 |
Store Locator Plus <= 5.5.15 - Unauthenticated Stored Cross-Site Scripting (XSS)
There are several endpoints in the Store Locator Plus for WordPress plugin through 5.5.15 that could allow unauthenticated attackers the ability to inject malicious JavaScript into pages.
Published: 2021-05-17T16:48:53.000Z
Updated: 2024-08-03T19:28:23.307Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-24289 |
vulnerable | 2026-06-08 05:30:04.124972 |
Store Locator Plus <= 5.5.14 - Authenticated Privilege Escalation
There is functionality in the Store Locator Plus for WordPress plugin through 5.5.14 that made it possible for authenticated users to update their user meta data to become an administrator on any site using the plugin.
Published: 2021-05-17T16:48:52.000Z
Updated: 2024-08-03T19:28:23.205Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.