critical9.1
CVE-2026-12965
The Super Store Finder WordPress plugin before 7.11 does not sanitize a parameter of an unauthenticated AJAX action before using it in a SQL query, allowing un…
Impact
The Super Store Finder WordPress plugin before 7.11 does not sanitize a parameter of an unauthenticated AJAX action before using it in a SQL query, allowing unauthenticated attackers to perform SQL injection and extract data from the database.
Affected products
| Product | Affected versions |
|---|---|
| Super Store Finder WordPress Plugin | before 7.11 |
Versions were read from the advisory text. No structured product data has been published for this record yet.