Cross-site Scripting Vulnerability in Metatagg Inc Custom WP Store Locator

CVE-2025-24676

What is CVE-2025-24676?

The Custom WP Store Locator plugin developed by Metatagg Inc is susceptible to a Cross-site Scripting (XSS) vulnerability. This flaw allows an attacker to inject malicious scripts into web pages returned to unsuspecting users. If exploited, it can lead to unauthorized access to user sessions and sensitive information. The vulnerable versions range from n/a through 1.4.7, making it crucial for website owners to update to the latest version to mitigate such risks. Ensuring adequate sanitization of input during web page generation is essential to prevent these vulnerabilities.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References