WordPress Plugin Vulnerabilities

Leaflet Maps Marker 3.5.2 - Two SQL Injection Vulnerabilities

Description

The Leaflet Maps Marker (Google Maps, OpenStreetMap, Bing Maps) WordPress plugin was affected by a Two SQL Injection Vulnerabilities security vulnerability.

Affects Plugins

Plugin icon
leaflet-maps-marker
Fixed in 3.5.3

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89

Miscellaneous

Verified
No
WPVDB ID
5656a38a-cca7-441c-9f67-62bf9356dda8

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2015-05-15 (about 10 years ago)

Other

Published
Title
Published
2014-08-01
Title
Ads Box - iframe_ampl.php count Parameter SQL Injection
Published
2025-07-24
Title
WooCommerce Point Of Sale (POS) <= 1.4 - Authenticated (Subscriber+) SQL Injection
Published
2026-04-27
Title
FunnelKit – Funnel Builder for WooCommerce Checkout < 3.15.0.2 - Unauthenticated SQL Injection
Published
2024-08-30
Title
WP Events Manager < 2.2.0 - Authenticated (Subscriber+) Time-Based SQL Injection
Published
2020-11-12
Title
Good LMS < 2.1.5 - Unauthenticated SQL Injection