critical9.8
CVE-2014-8621
SQL injection vulnerability in the Store Locator plugin 2.3 through 3.11 for WordPress allows remote attackers to execute arbitrary SQL commands via the sl_cus…
Impact
SQL injection vulnerability in the Store Locator plugin 2.3 through 3.11 for WordPress allows remote attackers to execute arbitrary SQL commands via the sl_custom_field parameter to sl-xml.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Store Locator Project | Store Locator | Versions 2.3, 3.11 |