Skip to content
Sign in
9.3 Critical

CVE-2025-28898 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPExperts.io WP…

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPExperts.io WP Multistore Locator wp-multi-store-locator allows SQL Injection.This issue affects WP Multistore Locator: from n/a through <= 2.5.2.

Affected products and versions

Product Affected versions Fixed in
WP Multistore Locator 2.5 earliest → 2.5.2 No fix stated
WP Multistore Locator 2.5 earliest → 2.5.2 No fix stated
Track this CVE