Locatoraid Store Locator

Locatoraid Store Locator has 9 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2026; 8 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 6.2, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 1 high. 2023 was the busiest year with 4 disclosures.

The most common weakness is Cross-Site Scripting, behind 6 of the records (67%). Other recurring categories include Cross-Site Request Forgery (CSRF), Deserialization Of Untrusted Data.

8 of the records (89%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2025.

9 independent researchers contributed these findings, one record each. Locatoraid Store Locator is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium
6.2/ 10
Patch Coverage89%
Open

1

Fixed

8

Get automatic notifications for all Locatoraid Store Locator vulnerabilities before they are exploited.

Most severe open issueCVSS 4.4CVE-2025-62140

Locatoraid Store Locator <= 3.9.65 - Authenticated (Administrator+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

9 records
2026-08-20 00:00CVE-2026-66680
7.5
High
arresterYes
2025-12-31 00:00CVE-2025-62140
4.4
Medium
Zeeshan HaiderNo
2025-01-03 00:00CVE-2024-56283
9.8
Critical
LVT-tholv2kYes
2024-10-15 00:00CVE-2024-9652
6.1
Medium
vgo0Yes
2024-03-25 00:00CVE-2024-30181
5.5
Medium
Joshua ChanYes
2023-08-28 00:00CVE-2023-4476
6.1
Medium
Dao Xuan HieuYes
2023-05-11 00:00CVE-2023-32576
6.4
Medium
Abdi PranataYes
2023-04-17 00:00CVE-2023-2031
5.4
Medium
Alex ThomasYes
2023-02-14 00:00CVE-2023-25709
4.3
Medium
Ngo Van ThienYes
Showing 1–9 of 9 reports
Locatoraid Store Locator banner
Latestv3.9.73

Locatoraid Store Locator

plainware

Author

plainware

4.5(17)
90/100
Last Updated
2026-08-20 (24d ago)
Active Installs
1,000+
Downloads
183,443
Requires WP
3.3+
Requires PHP
5.3+
Tested up to
WP 7.1
Created
2014-01-20 (13y ago)

Locatoraid is a lightweight, easy-to-use store locator plugin. Let your customers quickly find your stores, dealers, hotels, restaurants, ATMs, products, or any other types of locations. Start In Minutes Just start adding your locations, then the automatic geocoding function finds the coordinates, and your locations are on the map waiting for your customers! Custom Map Styles Easily configurable map styles to match your website. Shortcode Parameters A number of shortcode parameters that can be used to configure the front end view, like default search text, search radius, view layout, limit to a state or a country, and more. Works Worldwide More than 200 countries covered. USA, Australia, Canada, Hong Kong, Italy, Japan, Mexico, Singapore, South Africa, Spain, UK and more. As long as it is on the Google Maps, it will be found. REST API The REST API lets you query and modify your locations through a number of REST endpoints. Mobile Friendly Responsive design that works perfectly well for iPhone, Android, Blackberry, Windows as well as for desktops, laptops and tablets. Pro Version Features Bulk Upload and Export The Bulk Upload and Export module lets you import, export and update your locations with a CSV file. Custom Fields Add up to 20 Custom Fields to store and display additional information about your locations. Products Assign Products to categorize your locations. Custom Map Icons With the Custom Map Icons you can set any custom icon for any of your locations. Get the Pro version of Locatoraid store locator plugin! Support Please contact us at http://www.locatoraid.com/ Follow on Facebook Author: Plainware Author URI: http://www.locatoraid.com

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C