SQL Injection in Super Store Finder Plugin for WordPress by Vendor
CVE-2026-12965
Currently unrated
What is CVE-2026-12965?
The Super Store Finder WordPress plugin version 7.8 contains a serious vulnerability where it fails to properly sanitize user-supplied input in an unauthenticated AJAX action. This flaw enables attackers to execute SQL injection attacks, potentially allowing them to manipulate database queries and retrieve sensitive data without authentication, posing a significant risk to the security and integrity of the database.
Affected Version(s)
Super Store Finder WordPress 0 <= 7.8
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.