Black Friday60% off BLACKFRIDAY2026
Platform
PlansPartners
Resources
ToolsBlogDocs
Labs
CVE ForecastOpservantAll Research →
Sign Up →
low·Product Based Web Vulnerabilities·Updated Oct 26, 2026

WordPress Agile Store Locator < 1.6.9 - Arbitrary File Read

Est. Time~10 seconds
Scan TypeGroup Scan
Targetsdomain, subdomain, ipv4
CostFree
20
Times Used
continuous scan runs
10
Continuously Checked
assets under CS
0
Vulnerabilities Found
confirmed findings
References
3.4
CVSSlow
Exploitable remotely over the internet · requires high privileges · user interaction needed.
Description

The Store Locator WordPress plugin before 1.6.9 does not validate a parameter before using it in a file path, allowing high-privileged users such as administrators to read arbitrary `.php` files from the server, including configuration files that contain database credentials and authentication keys.

Attack Vector
Network
Privileges Req.
High
User Interaction
Required
Affected
Store Locator WordPress
AFFECTED< 1.6.9→SAFE ✓≥ 1.6.9
Updated Nov 10, 2026View on NVD →
Similar Tools
low
WordPress BuddyPress < 2.9.2 - Authenticated Open Redirect
→low
WordPress H5VP Plugin - Full Path Disclosure
→low
Allen-Bradley GuardPLC Series PLC - Detect
→low
SPF record DNS lookup limit
→low
Dameng Database - Detect
→low
Schneider Electric Modicon 340 Series PLC - Detect
→low
Snap7 Honeypot Default Configuration - Detect
→low
Allen-Bradley MicroLogix Series PLC - Detect
→

Check your infrastructure.
Right now.

12,000+ scanners. Free to start. No credit card required.

Browse All Tools