Skip to content
OpenAdvisories
Unscored CVE-2021-24130 EUVD-2021-11044GHSA-3xhc-3pqp-v39v

WP Google Map Plugin < 4.1.5 - Authenticated SQL Injection

Published Mar 18, 2021 · Updated Aug 3, 2024 · Assigned by WPScan

Description

Unvalidated input in the WP Google Map Plugin WordPress plugin, versions before 4.1.5, in the Manage Locations page within the plugin settings was vulnerable to SQL Injection through a high privileged user (admin+).

Affected products

VendorProductAffectedFixed
— WP Google Map Plugin 4.1.5 – < 4.1.5 4.1.5

References