4.3
Medium
CVE-2025-31888 Cross-Site Request Forgery (CSRF) vulnerability in WPExperts.io WP Multistore Locator wp-multi-store-locator allows…
Description
Cross-Site Request Forgery (CSRF) vulnerability in WPExperts.io WP Multistore Locator wp-multi-store-locator allows Cross Site Request Forgery.This issue affects WP Multistore Locator: from n/a through <= 2.5.2.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WP Multistore Locator 2.5 | earliest → 2.5.2 | No fix stated |
Other CVEs of WP Multistore Locator
The 4 CVEs of WP Multistore Locator →
CVE-2025-28898
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPExperts.io WP…
9.3
Critical
CVE-2025-26974
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPExperts.io WP…
9.3
Critical
CVE-2025-24680
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in WPExperts.io WP…
7.1
High