CVE-2019-10692: SQL Injection
Published Apr 2, 2019
·Updated
In the wp-google-maps plugin before 7.11.18 for WordPress, includes/class.rest-api.php in the REST API does not sanitize field names before a SELECT statement.
Affected Software
1 affected component
Codecabin Wp Go Maps Wordpress<7.11.18
Remediation
Event History
Apr 2, 2019
CVE Published
via MITRE·05:37 PM
Data Sourced
via MITRE·05:37 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-10692?
CVE-2019-10692 has a medium severity rating due to its potential for SQL injection exploits.
2
How do I fix CVE-2019-10692?
To fix CVE-2019-10692, update the wp-google-maps plugin to version 7.11.18 or later.
3
What type of vulnerability is CVE-2019-10692?
CVE-2019-10692 is classified as an SQL injection vulnerability.
4
What versions of wp-google-maps are affected by CVE-2019-10692?
CVE-2019-10692 affects all versions of wp-google-maps prior to 7.11.18.
5
Can CVE-2019-10692 be exploited remotely?
Yes, CVE-2019-10692 can be exploited remotely due to insufficient input sanitization in the REST API.