wp-store-locator vulnerabilities
CVEs whose affected-version data names the wp-store-locator package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-105078Medium· 6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Store Locator WP Store Locator wp-store-locator allows Stored XSS.This issue affects WP Store Locator: from n/a through 3.0.3.
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Store Locator WP Store Locator wp-store-locator allows Stored XSS.This issue affects WP Store Locator: from n/a through 3.0.3.
▾ SunlitWP Store Locator · wp-store-locatorEPSS 0.16%via NVD
CVE-2026-94681Medium· 5.9Unauthenticated Denial of Service Attack in WP Store Locator < 3.0.0 versions.
Unauthenticated Denial of Service Attack in WP Store Locator < 3.0.0 versions.
▾ SunlitTijmen Smit · wp-store-locatorEPSS 0.29%via NVD