SQL Injection Vulnerability in Agile Logix Store Locator WordPress Plugin

CVE-2025-67516

What is CVE-2025-67516?

The Agile Logix Store Locator WordPress plugin is affected by a vulnerability that allows for Blind SQL Injection attacks, enabling an attacker to manipulate SQL queries executed by the plugin. This improper handling of special characters in SQL commands poses significant risks, allowing unauthorized access to sensitive information stored in the database. The vulnerability affects versions of the plugin from release n/a through 1.6.2, highlighting the importance of patching and securing WordPress installations against such exploits.

References