Vulnerabilities > Store Locator Project
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2017-10-16 | CVE-2014-8621 | SQL Injection vulnerability in Store Locator Project Store Locator 2.3/3.11 SQL injection vulnerability in the Store Locator plugin 2.3 through 3.11 for WordPress allows remote attackers to execute arbitrary SQL commands via the sl_custom_field parameter to sl-xml.php. | 7.5 |
2015-06-16 | CVE-2015-4610 | SQL Injection vulnerability in Store Locator Project Store Locator 3.3.0 SQL injection vulnerability in the Store Locator (locator) extension before 3.3.1 for TYPO3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. | 6.5 |