CVE-2026-9062 Scanner
CVE-2026-9062 Scanner - Arbitrary File Read vulnerability in WordPress Agile Store Locator
Used 5 times · 4.2k assets checked · domain, subdomain, ipv4
CVE
CVE-2026-9062
3.4
CVSSlow
Exploitable remotely over the internet · requires high privileges · user interaction needed.
Description
The Store Locator WordPress plugin before 1.6.9 does not validate a parameter before using it in a file path, allowing high-privileged users such as administrators to read arbitrary `.php` files from the server, including configuration files that contain database credentials and authentication keys.
Attack Vector
Network
Privileges Req.
High
User Interaction
Required
store locator wordpress
Updated Nov 6, 2026View on NVD →
S4E scanner
CVE history: store locator wordpress
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →