WordPress 10Web Map Builder < 1.0.73 - Unauthenticated SQL Injection

The 10Web Map Builder for Google Maps WordPress plugin before 1.0.73 does not properly sanitise and escape some parameters before using them in an SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection id: CVE-2023-0037 info: name: WordPress 10Web Map...

CVE-2023-0037

creationtimestamp| type| source ---|---|--- 2023-03-13 19:23:12+00:00| seen| https://t.me/cibsecurity/59910 2025-03-02 11:44:20+00:00| seen| Telegram/473RzYN8J9DFpGG6FhPBWnoIOLebP5gKDXvWELJcosREZk7 2025-09-16 21:02:28+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lyy7rtxcld...

CVE-2023-0037

The 10Web Map Builder for Google Maps WordPress plugin before 1.0.73 does not properly sanitise and escape some parameters before using them in an SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection...

CVE-2023-0037

The 10Web Map Builder for Google Maps WordPress plugin, in versions prior to 1.0.73 , is vulnerable to SQL injection . The root cause is the failure to properly sanitise and escape certain parameters used in an SQL statement triggered by an AJAX action . Because this action is accessible to unaut...

CVE-2023-0037 10WebMapBuilder < 1.0.73 - Unauthenticated SQLi

The 10Web Map Builder for Google Maps WordPress plugin before 1.0.73 does not properly sanitise and escape some parameters before using them in an SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection...

CVE-2023-0037 10WebMapBuilder < 1.0.73 - Unauthenticated SQLi

The 10Web Map Builder for Google Maps WordPress plugin before 1.0.73 does not properly sanitise and escape some parameters before using them in an SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection...

WordPress 10Web Map Builder for Google Maps Plugin < 1.0.73 is vulnerable to SQL Injection

Software 10Web Map Builder for Google Maps Type Plugin Vulnerable versions 1.0.73 Fixed in 1.0.73 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-0037 Patch priority High CVSS severity High 8.2 Developer Claim ownership PSID d12f4275dd8a Credits Daniel Krohmer Fraunhofer IESE...