Description
The WP Go Maps WordPress plugin before 10.1.04 does not properly sanitise and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | WP Go Maps | < 10.1.04 | 10.1.04 |
References
- https://wpscan.com/vulnerability/9676af2f-8871-4715-b420-082b1afeb7b4/ exploit vdb-entry technical-description