4 matches found
CVE-2023-0037
The 10Web Map Builder for Google Maps WordPress plugin, in versions prior to 1.0.73 , is vulnerable to SQL injection . The root cause is the failure to properly sanitise and escape certain parameters used in an SQL statement triggered by an AJAX action . Because this action is accessible to unaut...
CVE-2024-31116
CVE-2024-31116 affects 10Web Map Builder for Google Maps (WordPress plugin: wd-google-maps) up to version 1.0.74. The issue is an SQL Injection due to improper neutralization of inputs in the plugin’s map builder, exploitable by an authenticated attacker with Administrator privileges. The vulnera...
CVE-2022-4758
CVE-2022-4758 affects the WordPress plugin 10WebMapBuilder (pre-1.0.72). The issue: the plugin does not validate/escape certain shortcode attributes before output, enabling Stored XSS from users with as low as a contributor to targets with admin privileges. Affected: 10WebMapBuilder WordPress plu...