Vulnerability Database

Virtual patches available
Back to Vulnerabilities

WordPress Super Store Finder premium plugin <= 6.3 - Unauthenticated SQL Injection (SQLi) vulnerability

superstorefinder-wp

Software
Super Store Finder
Versions
<= 6.3
Disclosure date
2021-03-08
CVE
CVE-N/A
References
Vulnerability details
Plugin changelog
Credits
Eagle Eye
Classification
SQL Injection
OWASP Top 10
A1: Injection
CVSS 3.0 score

6.5

Medium

Can be exploited remotely without any authentication

Are your websites subject to this vulnerability?

Patch now
View vulnerabilities for this software
Details

Unauthenticated SQL Injection (SQLi) vulnerability discovered by Eagle Eye in WordPress Super Store Finder premium plugin (versions <= 6.3).

Solution

Plugin vendor claims that vulnerability is patched in version 6.4. However, other sources like WPScan claim that there is still one SQL Injection vector left. We do not have access to the code of the plugin to verify it. Update the WordPress Super Store Finder premium plugin to the latest available version (at least 6.4).

Found a vulnerability that puts your sites at risk?

Patches available at Patchstack

Found a vulnerability? Help us secure the web and join our community of ethical hackers.

Report a Vulnerability

Are you the developer of this software? Hire our researchers for a thorough security audit.

Learn more
Products
Patchstack Platform
Vulnerability Database
Security Auditing
Patchstack Red Team
Patchstack
Pricing
Features
About Us
Help Center
Articles
Careers
Privacy Policy
Terms & Conditions
Media Kit
© 2021 Patchstack
LinkedIn
Facebook
Twitter
© 2021 Patchstack