PLUGIN SECURITY
Is Wp Store Locator safe?
Free store locator with OpenStreetMap maps and no API key. Or use Google Maps, Mapbox or Stadia Maps. Unlimited locations, custom fields and markers.
What this plugin does
- Slug:
wp-store-locator - Author: Tijmen Smit
- 40000+ active installs
- 96/100 rating (312 reviews on wordpress.org)
- 1814756 all-time downloads
- On WordPress.org since 2013-12-31
dealer locatorGoogle Mapsopenstreetmapstore finderStore locator
Maintenance status
- Latest known version: 2.3.22
- Last updated: 2026-11-03 5:01pm GMT
- Tested up to WordPress: 7.1.4
- Requires PHP: 7.4+
- Max supported PHP (analyzed): <8.0
Known vulnerabilities
4 known CVEs on file for Wp Store Locator. Reported between 2025 and 2026.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2026-105078 | WP Store Locator [wp-store-locator] < 3.1.0 | — | Medium 6.5 | < 3.1.0 | 3.1.0 | 2026-09-24 | ⚠ update needed |
| CVE-2026-3361 | WP Store Locator [wp-store-locator] < 2.3.0 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.4 | < 2.3.0 | 2.3.0 | 2026-04-22 | ✓ fixed in latest |
| CVE-2026-94681 | WP Store Locator [wp-store-locator] < 3.0.0 | Allocation of Resources Without Limits or Throttling | Medium 5.9 | < 3.0.0 | 3.0.0 | 2026-04-22 | ⚠ update needed |
| CVE-2025-52737 | WP Store Locator [wp-store-locator] < 2.2.261 | Deserialization of Untrusted Data | High 8.8 | < 2.2.261 | 2.2.261 | 2025-07-31 | ✓ fixed in latest |
How to fix it
Keep Wp Store Locator updated — 2.3.22 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- WP Go Maps – Google Map, OpenStreetMap, Leaflet Map — 300000+ active installs — 96/100 (3061) — max PHP 8.4
- iframe — 60000+ active installs — 88/100 (56) — max PHP 8.4
- WP Maps – Google Maps, OpenStreetMap, Mapbox, Store Locator with Search, Filters & Listings — 60000+ active installs — 86/100 (122) — max PHP 8.4
- API KEY for Google Maps — 30000+ active installs — 98/100 (55)
- MapPress – Free Map Plugin for Google Maps & OpenStreetMap — 30000+ active installs — 94/100 (147)
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.