CVE-2022-4677

The CVE-2022-4677 entry corresponds to the Leaflet Maps Marker WordPress plugin (Google Maps/OpenStreetMap/Bing Maps) prior to version 3.12.7. The vulnerability arises from improper validation and escaping of a shortcode attribute, enabling Stored Cross-Site Scripting (Stored XSS) by users with a...

CVE-2022-1123

CVE-2022-1123 affects the WordPress plugin Leaflet Maps Marker prior to version 3.12.5. The issue is improper sanitization of certain parameters before they are inserted into SQL queries, enabling SQL injection by high-privilege users (no user interaction required). The vulnerability is documente...

CVE-2024-38782

Leaflet Maps Marker (WordPress plugin) versions