Approved changes feed: RSS · Atom

cpe:2.3:a:highwarden:super_store_finder:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorHighwarden (4d69cfdb-3f9e-54c5-85c7-2479ec42f298)
ProductSuper Store Finder (d1ecbd03-369e-53bb-860f-be4aba780ce5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-58939 vulnerable 2026-06-08 07:35:19.780821 WordPress Super Store Finder plugin <= 7.5 - Cross Site Request Forgery (CSRF) vulnerability
MEDIUM (4.3)
Cross-Site Request Forgery (CSRF) vulnerability in highwarden Super Store Finder superstorefinder-wp allows Cross Site Request Forgery.This issue affects Super Store Finder: from n/a through <= 7.5.
Published: 2025-10-29T08:38:02.625Z
Updated: 2026-04-28T16:13:50.006Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52720 vulnerable 2026-06-08 07:31:12.874715 WordPress Super Store Finder Plugin <= 7.5 - SQL Injection Vulnerability
CRITICAL (9.3)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in highwarden Super Store Finder superstorefinder-wp allows SQL Injection.This issue affects Super Store Finder: from n/a through <= 7.5.
Published: 2025-08-14T10:34:03.399Z
Updated: 2026-04-28T16:13:17.607Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49413 vulnerable 2026-06-08 07:29:13.051383 WordPress Super Store Finder Plugin <= 7.6 - Reflected Cross Site Scripting (XSS) Vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in highwarden Super Store Finder superstorefinder-wp allows Reflected XSS.This issue affects Super Store Finder: from n/a through <= 7.6.
Published: 2025-08-20T08:03:44.211Z
Updated: 2026-05-12T00:34:35.949Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-47571 vulnerable 2026-06-08 07:27:14.570231 WordPress Super Store Finder plugin < 7.8 - Local File Inclusion vulnerability
HIGH (7.5)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in highwarden Super Store Finder superstorefinder-wp allows PHP Local File Inclusion.This issue affects Super Store Finder: from n/a through < 7.8.
Published: 2025-09-09T16:25:27.014Z
Updated: 2026-04-28T16:12:45.340Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-39445 vulnerable 2026-06-08 07:23:06.571331 WordPress Super Store Finder <= 7.2 - SQL Injection Vulnerability
CRITICAL (9.3)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in highwarden Super Store Finder superstorefinder-wp allows SQL Injection.This issue affects Super Store Finder: from n/a through <= 7.2.
Published: 2025-05-19T18:56:59.117Z
Updated: 2026-04-28T16:12:31.832Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-43978 vulnerable 2026-06-08 06:45:53.340066 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-43976 vulnerable 2026-06-08 06:45:53.339032 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-43975 vulnerable 2026-06-08 06:45:53.337843 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.