Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The Store Locator WordPress plugin before 1.6.9 does not validate a parameter before using it in a file path, allowing high-privileged users such as administrators to read arbitrary `.php` files from the server, including configuration files that contain database credentials and authentication keys.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
🚨 CVE-2026-9062 - low 🚨 WordPress Agile Store Locator < 1.6.9 - Arbitrary File Read > The Agile Store Locator WordPress plugin before 1.6.9 does not validate a parameter b... 👾 https://cloud.projectdiscovery.io/library/CVE-2026-9062 @pdnuclei #NucleiTemplates #cve
CVE-2026-9062 The Store Locator WordPress plugin before 1.6.9 does not validate a parameter before using it in a file path, allowing high-privileged users such as administrators to r… https://www.cve.org/CVERecord?id=CVE-2026-9062
Post summary
The text announces CVE-2026-9062, a file path validation flaw in the Store Locator WordPress plugin affecting versions prior to 1.6.9, which could be exploited by administrators.