CVE Database /
CVE-2019-10692
CVE · Critical
CVE-2019-10692 — WP Go Maps – Google Map, OpenStreetMap, Leaflet Map [wp-google-maps] < 7.11.18
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2019-10692
|
WP Go Maps – Google Map, OpenStreetMap, Leaflet Map [wp-google-maps] < 7.11.18 |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') |
Critical
9.8
|
< 7.11.18
|
7.11.18 |
2019-04-02 |
—
|
CVE-2019-10692
The wp-google-maps plugin versions prior to 7.11.18 contain a vulnerability in its REST API implementation where user-supplied field names are not properly sanitized before being used in SQL SELECT queries. This oversight in includes/class.rest-api.php allows attackers to inject malicious SQL code. The vulnerability affects all installations running the plugin before version 7.11.18, and administrators should upgrade to 7.11.18 or later to remediate the issue.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings