CVE-2026-73183

Unauthenticated SQL Injection in Maps Marker Pro = 4.32 versions...

CVE-2026-73183 WordPress Maps Marker Pro plugin <= 4.32 - SQL Injection vulnerability

Unauthenticated SQL Injection in Maps Marker Pro = 4.32 versions...

EUVD-2026-62378

Unauthenticated SQL Injection in Maps Marker Pro = 4.32 versions...

CVE-2026-73183

Maps Marker Pro (WordPress plugin) versions ≤ 4.32 contain an unauthenticated SQL injection vulnerability, allowing remote attackers with no credentials to read sensitive data and potentially affect availability. CVSS 3.1 scores it 9.3 Critical (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L). Patchstack ha...

EUVD-2024-32245

Malicious code in bioql PyPI...

EUVD-2022-24466

Malicious code in bioql PyPI...

EUVD-2022-52001

Malicious code in bioql PyPI...

EUVD-2024-37620

Malicious code in bioql PyPI...

CVE-2024-3670

The Leaflet Maps Marker Google Maps, OpenStreetMap, Bing Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'mapsmarker' shortcode in all versions up to, and including, 3.12.8 due to insufficient input sanitization and output escaping on user supplied attribut...

CVE-2022-4677

The Leaflet Maps Marker WordPress plugin before 3.12.7 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack...

CVE-2022-1123

The Leaflet Maps Marker Google Maps, OpenStreetMap, Bing Maps WordPress plugin before 3.12.5 does not properly sanitize some parameters before inserting them into SQL queries. As a result, high privilege users could perform SQL injection attacks...

CVE-2024-38782

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in MapsMarker.Com e.U. Leaflet Maps Marker allows Stored XSS.This issue affects Leaflet Maps Marker: from n/a through 3.12.9...

CVE-2024-38782

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in MapsMarker.Com e.U. Leaflet Maps Marker allows Stored XSS.This issue affects Leaflet Maps Marker: from n/a through 3.12.9...

CVE-2024-38782 WordPress Leaflet Maps Marker plugin <= 3.12.9 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in MapsMarker.Com e.U. Leaflet Maps Marker allows Stored XSS.This issue affects Leaflet Maps Marker: from n/a through 3.12.9...

CVE-2024-38782

Leaflet Maps Marker (WordPress plugin) versions

CVE-2024-38782 WordPress Leaflet Maps Marker plugin <= 3.12.9 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in MapsMarker.Com e.U. Leaflet Maps Marker allows Stored XSS.This issue affects Leaflet Maps Marker: from n/a through 3.12.9...

WordPress Leaflet Maps Marker plugin <= 3.12.9 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin Leaflet Maps Marker versions = 3.12.9...

WordPress Leaflet Maps Marker Plugin <= 3.12.9 is vulnerable to Cross Site Scripting (XSS)

Software Leaflet Maps Marker Type Plugin Vulnerable versions = 3.12.9 Fixed in 3.12.10 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-38782 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 9802cb5e3912 Credits LVT-tholv2k Required privilege...

WordPress Leaflet Maps Marker plugin <= 3.12.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Shortcode vulnerability discovered by Krzysztof Zając in WordPress Plugin Leaflet Maps Marker versions = 3.12.8...

WordPress Leaflet Maps Marker Plugin <= 3.12.8 is vulnerable to Cross Site Scripting (XSS)

Software Leaflet Maps Marker Type Plugin Vulnerable versions = 3.12.8 Fixed in 3.12.9 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-3670 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID b2bea7978f3c Credits Krzysztof Zając...