EUVD-2025-34548

The WP Google Map Plugin plugin for WordPress is vulnerable to blind SQL Injection via the 'id' parameter of the 'googlemap' shortcode in all versions up to, and including, 1.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query...

CVE-2025-11365 WP Google Map Plugin <= 1.0 - Authenticated (Contributor+) SQL Injection

The WP Google Map Plugin plugin for WordPress is vulnerable to blind SQL Injection via the 'id' parameter of the 'googlemap' shortcode in all versions up to, and including, 1.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query...

AZL-68315 CVE-2024-56592 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: bpf: Call freehtabelem after htabunlockbucket For htab of maps, when the map is removed from the htab, it may hold the last reference of the map. bpfmapfdputptr will invoke bpfmapfreeid to free the id of the removed map element...

CVE-2024-50971

A SQL injection vulnerability in print.php of Itsourcecode Construction Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the mapid parameter...

PT-2024-38700 · Unknown · Itsourcecode Project Expense Monitoring System

Name of the Vulnerable Software and Affected Versions: itsourcecode Project Expense Monitoring System version 1.0 Description: A critical issue affects some unknown functionality of the file print.php. The manipulation of the map id argument leads to SQL injection. This issue can be exploited...

Itsourcecode Project Expense Monitoring System SQL Injection Vulnerability

itsourcecode Project Expense Monitoring System is a project expense monitoring system from itsourcecode. A SQL injection vulnerability exists in itsourcecode Project Expense Monitoring System version 1.0, which stems from some unknown functionality in the file print.php, where manipulation of the...

CVE-2023-6697

The WP Go Maps formerly WP Google Maps plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the map id parameter in all versions up to, and including, 9.0.28 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

CVE-2023-6697 WP Go Maps (formerly WP Google Maps) <= 9.0.28 - Reflected Cross-Site Scripting

The WP Go Maps formerly WP Google Maps plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the map id parameter in all versions up to, and including, 9.0.28 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

CVE-2023-6697: Improper Neutralization of Input During Web Page Generation

The WP Go Maps formerly WP Google Maps plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the map id parameter in all versions up to, and including, 9.0.28 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

PT-2024-15055

Name of the Vulnerable Software and Affected Versions WP Go Maps plugin for WordPress versions up to, and including, 9.0.28 Description The issue is related to Reflected Cross-Site Scripting via the map id parameter due to insufficient input sanitization and output escaping. This allows...

PT-2017-7254

Name of the Vulnerable Software and Affected Versions Easy2Map plugin versions prior to 1.3.0 Description The issue is related to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary web script or HTML via the map id parameter in the includes/MapPinImageSave.ph...

WordPress custom-map plugin cross-site scripting vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language , the platform supports PHP and MySQL server set up a personal blog site . custom-map plugin is used in one of the custom map plugin . A cross-site scripting vulnerability exists in WordPres...

PT-2017-14982

Name of the Vulnerable Software and Affected Versions WordPress custom-map plugin versions prior to 1.2 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the map id parameter to "view/advancedsettings.php" API endpoint. Recommendations For...

PT-2015-6642

Name of the Vulnerable Software and Affected Versions Easy2Map plugin versions prior to 1.2.5 Description The issue allows remote attackers to create arbitrary files via a .. dot dot in the map id parameter in the includes/MapPinImageSave.php file. Recommendations For versions prior to 1.2.5,...