plainware vulnerabilities

CVEs per yearBy the year they were published

1. 20235
2. 20245
3. 20255
4. 20261

Newest CVEs

• CVE-2026-66680

  WordPress Locatoraid Store Locator plugin <= 3.9.72 - SQL Injection vulnerability

  plainware · Locatoraid Store Locator

  Critical9.3
• CVE-2025-62140

  WordPress Locatoraid Store Locator plugin <= 3.9.68 - Cross Site Scripting (XSS) vulnerability

  plainware · Locatoraid Store Locator

  Medium5.9
• CVE-2025-32623

  WordPress PlainInventory plugin <= 3.1.9 - CSRF to Stored XSS vulnerability

  plainware · PlainInventory

  High7.1
• CVE-2025-24557

  WordPress PlainInventory plugin <= 3.1.5 - Reflected Cross Site Scripting (XSS) vulnerability

  plainware · PlainInventory

  High7.1
• CVE-2024-56283

  WordPress Locatoraid Store Locator Plugin <= 3.9.50 - PHP Object Injection vulnerability

  plainware · Locatoraid Store Locator

  High8.1
• CVE-2024-56291

  WordPress PlainInventory – Inventory Management Plugin Plugin <= 3.1.6 - PHP Object Injection vulnerability

  plainware · PlainInventory

  High8.1
• CVE-2024-9652

  Locatoraid Store Locator <= 3.9.47 - Reflected Cross-Site Scripting

  plainware · Locatoraid Store Locator

  Medium6.1
• CVE-2024-44040

  WordPress ShiftController Employee Shift Scheduling plugin <= 4.9.64 - Cross Site Scripting (XSS) vulnerability

  plainware · ShiftController Employee Shift Scheduling

  Medium5.9
• CVE-2024-9435

  ShiftController Employee Shift Scheduling <= 4.9.66 - Reflected Cross-Site Scripting

  plainware · ShiftController Employee Shift Scheduling

  Medium6.1
• CVE-2024-4733

  ShiftController Employee Shift Scheduling <= 4.9.57 - Authenticated (Contributor+) PHP Object Injection

  plainware · ShiftController Employee Shift Scheduling

  High7.5