CVE-2025-47571: WordPress Super Store Finder plugin < 7.8 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in highwarden Super Store Finder superstorefinder-wp allows PHP Local File Inclusion.This issue affects Super Store Finder: from n/a through < 7.8.
Other sources
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in highwarden Super Store Finder. This issue affects Super Store Finder: from n/a through 6.9.7.
— NVD
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-47571?
CVE-2025-47571 is classified as a high severity vulnerability due to the potential for remote file inclusion in the affected application.
How do I fix CVE-2025-47571?
To fix CVE-2025-47571, update the Super Store Finder or Super Store Finder plugin to the latest version that resolves this vulnerability.
What impact does CVE-2025-47571 have on my system?
CVE-2025-47571 allows attackers to exploit improper control of filename parameters, potentially leading to data breaches or server compromise.
Which versions are affected by CVE-2025-47571?
CVE-2025-47571 affects Super Store Finder versions from n/a up to 6.9.7.
Is the WordPress Super Store Finder plugin vulnerable to CVE-2025-47571?
Yes, the WordPress Super Store Finder plugin version up to 6.9.7 is also vulnerable to CVE-2025-47571.