CVE-2014-8621

CRITICAL · CVSS 9.8 EPSS 2.99%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2017-10-16 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2014-8621

Severity

CRITICAL

CVSS

9.8

EPSS

2.99%

WordPress

Original NVD Description

SQL injection vulnerability in the Store Locator plugin 2.3 through 3.11 for WordPress allows remote attackers to execute arbitrary SQL commands via the sl_custom_field parameter to sl-xml.php.