CVE-2026-81768
HighCVSS 7.1Exploitation Probability (EPSS)
Low risk4th percentile - higher than 4% of all known CVEs
Summary
An unauthenticated Cross Site Scripting (XSS) vulnerability in Super Store Finder versions up to and including 7.10.
Risk Assessment
An attacker can inject malicious script into the page, potentially leading to data theft or session hijacking.
Recommendation
Update the Super Store Finder plugin to the latest version that includes a fix for this vulnerability.
Other vulnerabilities in Super Store Finder
See all- CVE-2026-108541Medium
A vulnerability was found in highwarden Super Store Finder up to version 3.8. An unknown function in /products/superstorefinder/index.php is affected, and manipulation of the lat/lng arguments leads to SQL injection. Remote exploitation is possible, and the exploit has been publicly disclosed. Upgrading to version 3.9 addresses the issue.
- CVE-2025-58939Medium
The Super Store Finder plugin for WordPress (versions up to 7.5) is vulnerable to Cross-Site Request Forgery (CSRF). An attacker can trick a logged-in user into performing unwanted actions.
Original NVD description (English source)
Unauthenticated Cross Site Scripting (XSS) in Super Store Finder <= 7.10 versions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS