CVE-2026-73183

Unauthenticated SQL Injection in Maps Marker Pro = 4.32 versions...

CVE-2026-73183 WordPress Maps Marker Pro plugin <= 4.32 - SQL Injection vulnerability

Unauthenticated SQL Injection in Maps Marker Pro = 4.32 versions...

EUVD-2026-62378

Unauthenticated SQL Injection in Maps Marker Pro = 4.32 versions...

CVE-2026-73183

Maps Marker Pro (WordPress plugin) versions ≤ 4.32 contain an unauthenticated SQL injection vulnerability, allowing remote attackers with no credentials to read sensitive data and potentially affect availability. CVSS 3.1 scores it 9.3 Critical (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L). Patchstack ha...

WordPress Maps Marker Pro plugin <= 4.32 - SQL Injection vulnerability

SQL Injection vulnerability discovered by johska in WordPress Plugin Maps Marker Pro versions = 4.32...

PT-2026-78334

Unauthenticated SQL Injection in Maps Marker Pro = 4.32 versions...

CVE-2026-73183: Improper Neutralization of Special Elements used in an SQL Command

Unauthenticated SQL Injection in Maps Marker Pro = 4.32 versions...

EUVD-2024-32245

Malicious code in bioql PyPI...

EUVD-2022-52001

Malicious code in bioql PyPI...

EUVD-2024-37620

Malicious code in bioql PyPI...

EUVD-2022-24466

Malicious code in bioql PyPI...

CVE-2024-3670

The Leaflet Maps Marker Google Maps, OpenStreetMap, Bing Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'mapsmarker' shortcode in all versions up to, and including, 3.12.8 due to insufficient input sanitization and output escaping on user supplied attribut...

CVE-2022-4677

The Leaflet Maps Marker WordPress plugin before 3.12.7 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack...

CVE-2022-1123

The Leaflet Maps Marker Google Maps, OpenStreetMap, Bing Maps WordPress plugin before 3.12.5 does not properly sanitize some parameters before inserting them into SQL queries. As a result, high privilege users could perform SQL injection attacks...

CVE-2024-38782

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in MapsMarker.Com e.U. Leaflet Maps Marker allows Stored XSS.This issue affects Leaflet Maps Marker: from n/a through 3.12.9...

CVE-2024-38782

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in MapsMarker.Com e.U. Leaflet Maps Marker allows Stored XSS.This issue affects Leaflet Maps Marker: from n/a through 3.12.9...

CVE-2024-38782 WordPress Leaflet Maps Marker plugin <= 3.12.9 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in MapsMarker.Com e.U. Leaflet Maps Marker allows Stored XSS.This issue affects Leaflet Maps Marker: from n/a through 3.12.9...

CVE-2024-38782

Leaflet Maps Marker (WordPress plugin) versions

CVE-2024-38782 WordPress Leaflet Maps Marker plugin <= 3.12.9 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in MapsMarker.Com e.U. Leaflet Maps Marker allows Stored XSS.This issue affects Leaflet Maps Marker: from n/a through 3.12.9...

CVE-2024-38782: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in MapsMarker.Com e.U. Leaflet Maps Marker allows Stored XSS.This issue affects Leaflet Maps Marker: from n/a through 3.12.9...