CVE-2021-24130

🗓️ 18 Mar 2021 14:57:48Reported by WPScanType

cve🔗 web.nvd.nist.gov👁 61 Views🌐 WEB

Unvalidated input in WP Google Map Plugin WordPress plugin, versions before 4.1.5, vulnerable to SQL Injectio

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2021-24130	18 Mar 202117:32	–	circl
CNNVD	Wordpress WP Google Map SQL注入漏洞	18 Mar 202100:00	–	cnnvd
CNVD	Wordpress WP Google Map SQL Injection Vulnerability	19 Mar 202100:00	–	cnvd
Cvelist	CVE-2021-24130 WP Google Map Plugin < 4.1.5 - Authenticated SQL Injection	18 Mar 202114:57	–	cvelist
EUVD	EUVD-2021-11044	7 Oct 202500:30	–	euvd
NVD	CVE-2021-24130	18 Mar 202115:15	–	nvd
OpenVAS	WordPress WP Google Map Plugin < 4.1.5 SQLi Vulnerability	22 Mar 202100:00	–	openvas
Prion	Sql injection	18 Mar 202115:15	–	prion
Positive Technologies	PT-2021-15675 · WordPress · Wp-Google-Map-Plugin	18 Mar 202100:00	–	ptsecurity
RedhatCVE	CVE-2021-24130	22 May 202518:23	–	redhatcve

NVD

Vulners

Node

weplugins wp_mapsRange<4.1.5wordpress

[
  {
    "product": "WP Google Map Plugin",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "4.1.5",
        "status": "affected",
        "version": "4.1.5",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
wpscan	www.wpscan.com/vulnerability/46af9a4d-67ac-4e08-a753-a2a44245f4f8

Parameter	Position	Path	Description	CWE
order	query param	wp-admin/admin.php?page=wpgmp_manage_location	SQL Injection in Manage Locations page (vulnerable through high privileged user).	CWE-89
orderby	query param	wp-admin/admin.php?page=wpgmp_manage_location	SQL Injection in Manage Locations page (vulnerable through high privileged user).	CWE-89

07 May 2025 13:35Current

7High risk

Vulners AI Score7

CVSS 26.5

CVSS 3.17.2

EPSS0.00567

CWE-89