How many WPExperts WP Multistore Locator CVEs are in CISA KEV?

None of WPExperts WP Multistore Locator's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of WPExperts WP Multistore Locator are affected?

10 distinct WPExperts WP Multistore Locator versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in WPExperts WP Multistore Locator CVEs?

WPExperts WP Multistore Locator's CVEs most often map to these CWE weakness types: CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-352 (Cross-Site Request Forgery (CSRF)), CWE-80 (Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)).

How many critical WPExperts WP Multistore Locator vulnerabilities are there?

WPExperts WP Multistore Locator has 2 critical and 1 high-severity CVEs.

What is the average severity of WPExperts WP Multistore Locator CVEs?

The average CVSS base score across WPExperts WP Multistore Locator's scored CVEs is 7.5.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

WPExperts

4 CVEs

WPExperts WP Multistore Locator Vulnerabilities

Name: WPExperts WP Multistore Locator vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for WP Multistore Locator by WPExperts.

4

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

7.5

Avg CVSS

2025–2025

Last updated April 1, 2025

Overview

WPExperts WP Multistore Locator has 4 published CVE records since 2025, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 7.5.

This page aggregates every publicly disclosed vulnerability (CVE) affecting WPExperts WP Multistore Locator, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of WPExperts WP Multistore Locator's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical2

High1

Medium1

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of WPExperts WP Multistore Locator's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No WPExperts WP Multistore Locator CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every WPExperts WP Multistore Locator version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

<= 2.5.22 CVEs
<= 2.4.71 CVE
<= 2.5.11 CVE
>= 2.5.11 CVE
>= 2.5.21 CVE

Fixed in

> 2.5.22 CVEs
> 2.4.71 CVE
> 2.5.11 CVE
2.5.11 CVE
2.5.21 CVE

Find a version

4 CVEs

Sort

WordPress WP Multi Store Locator Plugin <= 2.5.2 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-31888
Patch
CWE-352
Medium · CVSS 4.3
EPSS 0.1% (4th pct)2025-04-01
WordPress WP Multistore Locator plugin <= 2.5.2 - SQL Injection vulnerability
CVE-2025-28898
Patch
CWE-89
Critical · CVSS 9.3
EPSS 0.6% (43th pct)2025-03-26
WordPress WP Multi Store Locator plugin <= 2.5.1 - SQL Injection vulnerability
CVE-2025-26974
Patch
CWE-89
Critical · CVSS 9.3
EPSS 0.5% (40th pct)2025-02-25
WordPress WP Multi Store Locator Plugin <= 2.4.7 - Cross Site Scripting (XSS) vulnerability
CVE-2025-24680
Patch
CWE-80
High · CVSS 7.1
EPSS 0.3% (17th pct)2025-01-27

Common weakness types

The CWE weakness categories most often found in WPExperts WP Multistore Locator CVEs. Follow any weakness for its full explanation.

Other WPExperts products

Browse vulnerabilities for other products by WPExperts.

post smtp21 CVEs post-smtp18 CVEs mycred7 CVEs wp multi store locator3 CVEs all in one login2 CVEs license manager for woocommerce2 CVEs new user approve2 CVEs password protected2 CVEs

All WPExperts vulnerabilities

Frequently asked questions

Common questions about WPExperts WP Multistore Locator vulnerabilities.

How many CVEs does WPExperts WP Multistore Locator have?: WPExperts WP Multistore Locator has 4 published CVE records since 2025.
How many WPExperts WP Multistore Locator CVEs are in CISA KEV?: None of WPExperts WP Multistore Locator's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for WPExperts WP Multistore Locator vulnerabilities?: No WPExperts WP Multistore Locator CVEs currently have a tracked public exploit in this dataset.
Which versions of WPExperts WP Multistore Locator are affected?: 10 distinct WPExperts WP Multistore Locator versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in WPExperts WP Multistore Locator CVEs?: WPExperts WP Multistore Locator's CVEs most often map to these CWE weakness types: CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-352 (Cross-Site Request Forgery (CSRF)), CWE-80 (Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)).
How many critical WPExperts WP Multistore Locator vulnerabilities are there?: WPExperts WP Multistore Locator has 2 critical and 1 high-severity CVEs.
What is the average severity of WPExperts WP Multistore Locator CVEs?: The average CVSS base score across WPExperts WP Multistore Locator's scored CVEs is 7.5.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track WPExperts WP Multistore Locator vulnerabilities

Monitor new WPExperts WP Multistore Locator vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing