Plainware vulnerabilities

Products

• Locatoraid Store Locator 9
• Shiftcontroller Employee Shift Scheduling 6
• Shiftcontroller 5
• Locatoraid 3
• Plaininventory 3

Newest

• plainware locatoraid store locator WordPress Locatoraid Store Locator plugin <= 3.9.72 - SQL Injection vulnerability CVE-2026-66680 9.3 CriticalAugust 20, 2026
• plainware locatoraid store locator WordPress Locatoraid Store Locator plugin <= 3.9.68 - Cross Site Scripting (XSS) vulnerability CVE-2025-62140 5.9 MediumDecember 31, 2025
• plainware plaininventory WordPress PlainInventory plugin <= 3.1.9 - CSRF to Stored XSS vulnerability CVE-2025-32623 7.1 HighApril 9, 2025
• plainware plaininventory WordPress PlainInventory plugin <= 3.1.5 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-24557 7.1 HighFebruary 3, 2025
• plainware locatoraid store locator WordPress Locatoraid Store Locator Plugin <= 3.9.50 - PHP Object Injection vulnerability CVE-2024-56283 8.1 HighJanuary 7, 2025
• plainware plaininventory WordPress PlainInventory – Inventory Management Plugin Plugin <= 3.1.6 - PHP Object Injection vulnerability CVE-2024-56291 8.1 HighJanuary 7, 2025
• plainware locatoraid store locator Locatoraid Store Locator <= 3.9.47 - Reflected Cross-Site Scripting CVE-2024-9652 6.1 MediumOctober 16, 2024
• plainware shiftcontroller employee shift scheduling WordPress ShiftController Employee Shift Scheduling plugin <= 4.9.64 - Cross Site Scripting (XSS) vulnerability CVE-2024-44040 5.9 MediumOctober 6, 2024
• plainware shiftcontroller, shiftcontroller employee shift scheduling +1 more ShiftController Employee Shift Scheduling <= 4.9.66 - Reflected Cross-Site Scripting CVE-2024-9435 6.1 MediumOctober 4, 2024
• plainware shiftcontroller, shiftcontroller employee shift scheduling +1 more ShiftController Employee Shift Scheduling <= 4.9.57 - Authenticated (Contributor+) PHP Object Injection CVE-2024-4733 7.5 HighMay 16, 2024
• plainware locatoraid store locator WordPress Locatoraid Store Locator plugin <= 3.9.30 - Cross Site Scripting (XSS) vulnerability CVE-2024-30181 5.9 MediumMarch 27, 2024
• plainware shiftcontroller, shiftcontroller employee shift scheduling +1 more WordPress ShiftController Employee Shift Scheduling Plugin <= 4.9.23 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-29425 5.4 MediumNovember 12, 2023
• plainware locatoraid, locatoraid store locator +1 more Locatoraid Store Locator < 3.9.24 - Reflected XSS CVE-2023-4476 6.1 MediumSeptember 25, 2023
• plainwaire locatoraid store locator WordPress Locatoraid Store Locator Plugin <= 3.9.18 is vulnerable to Cross Site Scripting (XSS) CVE-2023-32576 6.5 MediumAugust 25, 2023
• plainware shiftcontroller, shiftcontroller employee shift scheduling +1 more WordPress ShiftController Employee Shift Scheduling Plugin <= 4.9.23 is vulnerable to Cross Site Scripting (XSS) CVE-2023-29424 7.1 HighJune 26, 2023
• plainware locatoraid, locatoraid store locator +1 more Locatoraid Store Locator <= 3.9.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2023-2031 5.4 MediumJune 9, 2023
• plainware shiftcontroller, shiftcontroller employee shift scheduling +1 more ShiftController Employee Shift Scheduling <= 4.9.25 - Reflected Cross-Site Scripting via Query String CVE-2023-1978 6.1 MediumJune 9, 2023
• plainware locatoraid, locatoraid store locator +1 more WordPress Locatoraid Store Locator Plugin <= 3.9.11 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-25709 5.4 MediumMarch 15, 2023