CVE-2021-24130 WP Google Map Plugin < 4.1.5 - Authenticated SQL Injection

2021-03-1814:57:48

CWE-89

WPScan

www.cve.org

0.001 Low

EPSS

Percentile

46.8%

JSON

Unvalidated input in the WP Google Map Plugin WordPress plugin, versions before 4.1.5, in the Manage Locations page within the plugin settings was vulnerable to SQL Injection through a high privileged user (admin+).

CNA Affected

[
  {
    "product": "WP Google Map Plugin",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "4.1.5",
        "status": "affected",
        "version": "4.1.5",
        "versionType": "custom"
      }
    ]
  }
]

References

wpscan.com/vulnerability/46af9a4d-67ac-4e08-a753-a2a44245f4f8

0.001 Low

EPSS

Percentile

46.8%

JSON

Related for CVELIST:CVE-2021-24130