4 matches found
CVE-2023-0037
The 10Web Map Builder for Google Maps WordPress plugin before 1.0.73 does not properly sanitise and escape some parameters before using them in an SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection
CVE-2024-31116
CVE-2024-31116 affects 10Web Map Builder for Google Maps (WordPress plugin: wd-google-maps) up to version 1.0.74. The issue is an SQL Injection due to improper neutralization of inputs in the plugin’s map builder, exploitable by an authenticated attacker with Administrator privileges. The vulnera...
CVE-2022-4758
CVE-2022-4758 affects the WordPress plugin 10WebMapBuilder (pre-1.0.72). The issue: the plugin does not validate/escape certain shortcode attributes before output, enabling Stored XSS from users with as low as a contributor to targets with admin privileges. Affected: 10WebMapBuilder WordPress plu...