CVE-2021-24130: WP Google Map Plugin < 4.1.5 - Authenticated SQL Injection
Published Mar 18, 2021
·Updated
Unvalidated input in the WP Google Map Plugin WordPress plugin, versions before 4.1.5, in the Manage Locations page within the plugin settings was vulnerable to SQL Injection through a high privileged user (admin+).
Affected Software
2 affected components
flippercode Wp Google Map Wordpress<4.1.5
Weplugins Wp Maps Wordpress<4.1.5
Event History
Mar 18, 2021
CVE Published
via MITRE·02:57 PM
Data Sourced
via MITRE·02:57 PM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2021-24130?
CVE-2021-24130 is a vulnerability in the WP Google Map Plugin WordPress plugin versions before 4.1.5 that allows SQL Injection through a high privileged user.
2
How severe is CVE-2021-24130?
CVE-2021-24130 has a severity level of 7.2 (high).
3
Which software versions are affected by CVE-2021-24130?
Versions before 4.1.5 of the WP Google Map Plugin WordPress plugin are affected by CVE-2021-24130.
4
What is the CWE ID for CVE-2021-24130?
The CWE ID for CVE-2021-24130 is 89.
5
How can I fix CVE-2021-24130?
To fix CVE-2021-24130, upgrade to version 4.1.5 or later of the WP Google Map Plugin WordPress plugin.