This host is running WordPress Google Maps Via Store Locator Plus Plugin and is prone to multiple vulnerabilities.

Successful exploitation will allow attacker to obtain sensitive information, compromise the application, access or modify data, exploit latent vulnerabilities in the underlying database. Impact Level: System/Application

Upgrade to Google Maps Via Store Locator Plus Plugin version 3.0.5 or later, For updates refer to http://wordpress.org/extend/plugins/store-locator-le

- An error exists due to the application displaying the installation path in debug output when accessing wp-content/plugins/store-locator-le/core/load_ wp_config.php. - Input passed via the 'query' parameter to /wp-content/plugins/store- locator-le/downloadcsv.php is not properly sanitised before being used in a SQL query. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code.

WordPress Google Maps Via Store Locator Plus Plugin version 3.0.1

• http://osvdb.org/82663
• http://secunia.com/advisories/49391
• http://wordpress.org/extend/plugins/store-locator-le/changelog/
• http://xforce.iss.net/xforce/xfdb/76094

---

Updated on 2015-03-25