HIGH
wpexpertsio
CVE published 2026-09-18
CVE-2026-15275
The WP Multi Store Locator Pro plugin for WordPress, versions up to and including 4.5.1, is vulnerable to SQL injection attacks through the 'store_locatore_search_radius' parameter. This vulnerability allows unauthenticated attackers to append additional SQL queries to existing queries, potentially leading to the extraction of sensitive information from the database. The vulnerability arises from insuffic [truncated]