Log in Start free

Plainware

Products

ProductCVEsExploitedLatest
Locatoraid Store Locator8–Aug 20, 2026
ShiftController Employee Shift Scheduling5–Oct 6, 2024
PlainInventory3–Apr 9, 2025

Exploited and recent CVEs

  • CVE-2026-66680 Critical 9.3 WordPress Locatoraid Store Locator plugin <= 3.9.72 - SQL Injection vulnerability 0.4%
  • CVE-2025-62140 Medium 5.9 WordPress Locatoraid Store Locator plugin <= 3.9.68 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-32623 High 7.1 WordPress PlainInventory plugin <= 3.1.9 - CSRF to Stored XSS vulnerability 0.2%
  • CVE-2025-24557 High 7.1 WordPress PlainInventory plugin <= 3.1.5 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-56283 High 8.1 WordPress Locatoraid Store Locator Plugin <= 3.9.50 - PHP Object Injection vulnerability 0.4%
  • CVE-2024-56291 High 8.1 WordPress PlainInventory – Inventory Management Plugin Plugin <= 3.1.6 - PHP Object Injection vulnerability 0.4%
  • CVE-2024-9652 Medium 6.1 Locatoraid Store Locator <= 3.9.47 - Reflected Cross-Site Scripting 0.4%
  • CVE-2024-44040 Medium 5.9 WordPress ShiftController Employee Shift Scheduling plugin <= 4.9.64 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-9435 Medium 6.1 ShiftController Employee Shift Scheduling <= 4.9.66 - Reflected Cross-Site Scripting 0.4%
  • CVE-2024-4733 High 7.5 ShiftController Employee Shift Scheduling <= 4.9.57 - Authenticated (Contributor+) PHP Object Injection 0.6%
  • CVE-2024-30181 Medium 5.9 WordPress Locatoraid Store Locator plugin <= 3.9.30 - Cross Site Scripting (XSS) vulnerability 0.4%
  • CVE-2023-32576 Medium 6.5 WordPress Locatoraid Store Locator Plugin <= 3.9.18 is vulnerable to Cross Site Scripting (XSS) 0.4%
  • CVE-2023-29424 High 7.1 WordPress ShiftController Employee Shift Scheduling Plugin <= 4.9.23 is vulnerable to Cross Site Scripting (XSS) 0.4%
  • CVE-2023-2031 Medium 5.4 Locatoraid Store Locator <= 3.9.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.5%
  • CVE-2023-1978 Medium 6.1 ShiftController Employee Shift Scheduling <= 4.9.25 - Reflected Cross-Site Scripting via Query String 0.4%
  • CVE-2023-25709 Medium 5.4 WordPress Locatoraid Store Locator Plugin <= 3.9.11 is vulnerable to Cross Site Request Forgery (CSRF) 0.2%