cvemon logocvemon logo

Activity

Trending

CVEs

CVE-2025-23422

Published Jan 24, 2025

Last updated 7 days ago

  1. Overview

  2. Weaknesses

  3. Social media

  4. References

Overview

Description
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in moaluko Store Locator store-locator allows PHP Local File Inclusion.This issue affects Store Locator: from n/a through <= 3.98.10.
Source
audit@patchstack.com
NVD status
Awaiting Analysis

Weaknesses

audit@patchstack.com
CWE-22

Social media

Hype score
Not currently trending
  1. Critical vulnerability (CVE-2025-23422, CVSS 7.5) in NotFound Store Locator (v3.98.10 and earlier) allows PHP Local File Inclusion via Path Traversal. Update immediately!

    @BursaMatus

    24 Jan 2025

    23 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  2. CVE-2025-23422 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in NotFound Store Locator allows PHP Local File Inclusion. This issue aff… https://t.co/7QJj9nEHaU

    @CVEnew

    24 Jan 2025

    456 Impressions

    0 Retweets

    1 Like

    0 Bookmarks

    0 Replies

    0 Quotes

References

Sources include official advisories and independent security research.

  • https://nvd.nist.gov/vuln/detail/CVE-2025-23422
  • https://patchstack.com/database/Wordpress/Plugin/store-locator/vulnerability/wordpress-store-locator-plugin-3-98-10-local-file-inclusion-vulnerability?_s_id=cve
TRY INTRUDER
Intruder logo

© 2026 Intruder Systems Ltd.

AboutPrivacySitemapFeeds