WordPress Plugin Vulnerabilities

Leaflet Maps Marker - Tag Multiple Parameter SQL Injection

Description

The mapsmarker WordPress plugin was affected by a Tag Multiple Parameter SQL Injection security vulnerability.

Affects Plugins

Plugin icon
mapsmarker
Fixed in 3.5.4

References

URL
https://www.mapsmarker.com/2013/05/24/v3-5-4-with-lots-of-translation-updates-bugfixes-is-available/

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89

Miscellaneous

Verified
No
WPVDB ID
d1735a50-db4b-4cb6-9593-434637c5f628

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2021-08-22
Title
WordPress Page Contact <= 1.0 - Authenticated (editor+) SQL Injection
Published
2025-01-16
Title
Solidres – Hotel booking plugin <= 0.9.4 - Authenticated (Contributor+) SQL Injection
Published
2024-05-23
Title
Search & Replace < 3.2.2 - Admin+ SQL injection
Published
2024-11-20
Title
Tutor LMS < 2.7.7 - Unauthenticated SQL Injection via rating_filter
Published
2025-05-16
Title
Eventer <= 3.9.6 - Unauthenticated SQL Injection