Super Store Finder

Super Store Finder has 14 disclosed vulnerabilities in the WordSec catalog, reported between 2020 and 2026; 13 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 7.7, and the most serious one scores 10.0 out of 10. Severity breakdown: 3 critical and 8 high. 2025 was the busiest year with 6 disclosures.

The most common weakness is SQL Injection, behind 7 of the records (50%). Other recurring categories include Cross-Site Scripting, Cross-Site Request Forgery (CSRF).

13 of the records (93%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2025.

10 independent researchers contributed these findings, most of them (3) reported by Seb.

Strategic Overview

Avg CVSSHigh

7.7/ 10

Patch Coverage93%

Open

Fixed

Get automatic notifications for all Super Store Finder vulnerabilities before they are exploited.

Most severe open issueCVSS 4.3CVE-2025-58939

Super Store Finder <= 7.5 - Cross-Site Request Forgery

Read the full analysis

Vulnerability Records

14 records


2026-08-28 00:00	Super Store Finder <= 7.10 - Unauthenticated Stored Cross-Site Scripting Super Store Finder <= 7.10	`CVE-2026-81768`	7.2 High	dutafi	Yes
2026-07-24 00:00	Super Store Finder <= 7.10 - Unauthenticated SQL Injection Super Store Finder <= 7.10	`CVE-2026-12965`	7.5 High	Michael Bielenberg	Yes
2025-08-21 00:00	Super Store Finder <= 7.5 - Cross-Site Request Forgery Super Store Finder <= 7.5	`CVE-2025-58939`	4.3 Medium	Tran Nguyen Bao Khanh	No
2025-08-21 00:00	Super Store Finder <= 7.6 - Reflected Cross-Site Scripting Super Store Finder <= 7.6	`N/A`	6.1 Medium	0xd4rk5id3	Yes
2025-07-31 00:00	Super Store Finder <= 7.5 - Unauthenticated SQL Injection Super Store Finder <= 7.5	`CVE-2025-52720`	7.5 High	Tran Nguyen Bao Khanh	Yes
2025-07-07 00:00	Super Store Finder < 6.8 - Unauthenticated Local File Inclusion Super Store Finder < 7.8	`CVE-2025-47571`	8.1 High	Bonds	Yes
2025-04-17 00:00	Super Store Finder <= 7.2 - Unauthenticated SQL Injection Super Store Finder <= 7.2	`CVE-2025-39445`	7.5 High	Nguyễn Trung Kiên	Yes
2025-02-08 00:00	Super Store Finder <= 7.0 - Unauthenticated SQL Injection to Stored Cross-Site Scripting Super Store Finder <= 7.0	`CVE-2024-13440`	8.2 High	Muhammad Zeeshan (Xib3rR4dAr)	Yes
2024-08-28 00:00	Super Store Finder <= 6.9.7 - Authenticated (Subscriber+) SQL Injection Super Store Finder <= 6.9.7	`CVE-2024-43976`	9.9 Critical	Seb	Yes
2024-08-28 00:00	Super Store Finder <= 6.9.7 - Unauthenticated Stored Cross-Site Scripting Super Store Finder <= 6.9.7	`CVE-2024-43975`	7.2 High	Seb	Yes

Showing 1–10 of 14 reports