WP Google Map Plugin < 4.1.5 - Authenticated SQL Injection
CVE-2021-24130

7.2HIGH

Key Information:

Vendor
Wordpress
Status
WP Google Map Plugin
Vendor
CVE Published:
18 March 2021

Summary

Unvalidated input in the WP Google Map Plugin WordPress plugin, versions before 4.1.5, in the Manage Locations page within the plugin settings was vulnerable to SQL Injection through a high privileged user (admin+).

Affected Version(s)

WP Google Map Plugin 4.1.5

References

https://wpscan.com/vulnerability/46af9a4d-67ac-4e08-a753-...
x_refsource_MISC

CVSS V3.1

Score:
7.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Nguyen Anh Tien - SunCSR (Sun* Cyber Security Research)
.