plainware vulnerabilities
17 published CVEs name plainware among the affected products.
- 17Published CVEs17 of them scored
- 3Last 12 monthspublished in the last year
- 1Critical6 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-124263
WordPress Locatoraid Store Locator plugin <= 3.9.75 - Cross Site Request Forgery (CSRF) vulnerability
plainware · Locatoraid Store Locator
Medium5.4 - CVE-2026-66680
WordPress Locatoraid Store Locator plugin <= 3.9.72 - SQL Injection vulnerability
plainware · Locatoraid Store Locator
Critical9.3 - CVE-2025-62140
WordPress Locatoraid Store Locator plugin <= 3.9.68 - Cross Site Scripting (XSS) vulnerability
plainware · Locatoraid Store Locator
Medium5.9 - CVE-2025-32623
WordPress PlainInventory plugin <= 3.1.9 - CSRF to Stored XSS vulnerability
plainware · PlainInventory
High7.1 - CVE-2025-24557
WordPress PlainInventory plugin <= 3.1.5 - Reflected Cross Site Scripting (XSS) vulnerability
plainware · PlainInventory
High7.1 - CVE-2024-56283
WordPress Locatoraid Store Locator Plugin <= 3.9.50 - PHP Object Injection vulnerability
plainware · Locatoraid Store Locator
High8.1 - CVE-2024-56291
WordPress PlainInventory – Inventory Management Plugin Plugin <= 3.1.6 - PHP Object Injection vulnerability
plainware · PlainInventory
High8.1 - CVE-2024-9652
Locatoraid Store Locator <= 3.9.47 - Reflected Cross-Site Scripting
plainware · Locatoraid Store Locator
Medium6.1 - CVE-2024-44040
WordPress ShiftController Employee Shift Scheduling plugin <= 4.9.64 - Cross Site Scripting (XSS) vulnerability
plainware · ShiftController Employee Shift Scheduling
Medium5.9 - CVE-2024-9435
ShiftController Employee Shift Scheduling <= 4.9.66 - Reflected Cross-Site Scripting
plainware · ShiftController Employee Shift Scheduling
Medium6.1