Skip to content
Sign in
9.3 Critical

CVE-2025-26974 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPExperts.io WP…

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPExperts.io WP Multistore Locator wp-multi-store-locator allows Blind SQL Injection.This issue affects WP Multistore Locator: from n/a through <= 2.5.1.

Affected products and versions

Product Affected versions Fixed in
WP Multi Store Locator 2.5 earliest → 2.5.1 No fix stated
WP Multistore Locator 2.5 earliest → 2.5.1 No fix stated
Track this CVE