CVE Database /
CVE-2021-24130
CVE · High
CVE-2021-24130 — WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters [wp-google-map-plugin] < 4.1.5
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2021-24130
|
WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters [wp-google-map-plugin] < 4.1.5 |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') |
High
7.2
|
< 4.1.5
|
4.1.5 |
2020-11-25 |
—
|
CVE-2021-24130
The WP Maps plugin before version 4.1.5 contained a SQL injection vulnerability accessible through the Manage Locations page in the plugin settings, exploitable by administrators and other high-privileged users. An attempted fix in version 4.1.4 failed to properly address the vulnerability, which was finally resolved in version 4.1.5.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings