Super Store Finder

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Super Store Finder

Information

Software Type Plugin
Software Slug superstorefinder-wp
Software Status Active
Software Author Super Store Finder
Software Website superstorefinder.net
Software Active Installs 6,992
Software Record Last Updated April 28, 2025

12 Vulnerabilities

Submit a Vulnerability
Super Store Finder <= 7.6 - Reflected Cross-Site Scripting
6.1
CVE ID Unknown
Aug 21, 2025
Researcher: 0xd4rk5id3
Super Store Finder <= 7.5 - Cross-Site Request Forgery
4.3
CVE-2025-58939
Aug 21, 2025
Researcher: Tran Nguyen Bao Khanh
Super Store Finder <= 7.5 - Unauthenticated SQL Injection
7.5
CVE-2025-52720
Jul 31, 2025
Researcher: Tran Nguyen Bao Khanh
Super Store Finder < 6.8 - Unauthenticated Local File Inclusion
8.1
CVE-2025-47571
Jul 7, 2025
Researcher: Bonds
Super Store Finder <= 7.2 - Unauthenticated SQL Injection
7.5
CVE-2025-39445
Apr 17, 2025
Researcher: Nguyễn Trung Kiên
Super Store Finder <= 7.0 - Unauthenticated SQL Injection to Stored Cross-Site Scripting
8.2
CVE-2024-13440
Feb 8, 2025
Researcher: Muhammad Zeeshan (Xib3rR4dAr)
Super Store Finder <= 6.9.7 - Unauthenticated SQL Injection
10.0
CVE-2024-43978
Aug 28, 2024
Researcher: Seb
Super Store Finder <= 6.9.7 - Authenticated (Subscriber+) SQL Injection
9.9
CVE-2024-43976
Aug 28, 2024
Researcher: Seb
Super Store Finder <= 6.9.7 - Unauthenticated Stored Cross-Site Scripting
7.2
CVE-2024-43975
Aug 28, 2024
Researcher: Seb
Super Store Finder <= 6.9.3 - Unauthenticated Email Creation/Sending
5.8
CVE-2023-5054
Sep 18, 2023
Researcher: Etharus
Super Store Finder <= 6.4, Super Interactive Maps <= 2.1 - SQL Injection
9.8
CVE ID Unknown
Mar 8, 2021
Researcher: Eagle Eye
Super Store Finder <= 6.1, Super Interactive Maps <= 1.9, Super Logo Showcase <= 2.2 - Arbitrary File Upload
8.8
CVE ID Unknown
Oct 21, 2020
Researcher: Eagle Eye
Title Status CVE ID CVSS Researchers Date
Super Store Finder <= 7.6 - Reflected Cross-Site Scripting Patched 6.1 0xd4rk5id3 August 21, 2025
Super Store Finder <= 7.5 - Cross-Site Request Forgery Unpatched CVE-2025-58939 4.3 Tran Nguyen Bao Khanh August 21, 2025
Super Store Finder <= 7.5 - Unauthenticated SQL Injection Patched CVE-2025-52720 7.5 Tran Nguyen Bao Khanh July 31, 2025
Super Store Finder < 6.8 - Unauthenticated Local File Inclusion Patched CVE-2025-47571 8.1 Bonds July 7, 2025
Super Store Finder <= 7.2 - Unauthenticated SQL Injection Patched CVE-2025-39445 7.5 Nguyễn Trung Kiên April 17, 2025
Super Store Finder <= 7.0 - Unauthenticated SQL Injection to Stored Cross-Site Scripting Patched CVE-2024-13440 8.2 Muhammad Zeeshan (Xib3rR4dAr) February 8, 2025
Super Store Finder <= 6.9.7 - Unauthenticated SQL Injection Patched CVE-2024-43978 10.0 Seb August 28, 2024
Super Store Finder <= 6.9.7 - Authenticated (Subscriber+) SQL Injection Patched CVE-2024-43976 9.9 Seb August 28, 2024
Super Store Finder <= 6.9.7 - Unauthenticated Stored Cross-Site Scripting Patched CVE-2024-43975 7.2 Seb August 28, 2024
Super Store Finder <= 6.9.3 - Unauthenticated Email Creation/Sending Patched CVE-2023-5054 5.8 Etharus September 18, 2023
Super Store Finder <= 6.4, Super Interactive Maps <= 2.1 - SQL Injection Patched 9.8 Eagle Eye March 8, 2021
Super Store Finder <= 6.1, Super Interactive Maps <= 1.9, Super Logo Showcase <= 2.2 - Arbitrary File Upload Patched 8.8 Eagle Eye October 21, 2020

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation