Is Geo To Lat affected by CVE-2026-32368?

A SQL injection vulnerability in the Geo to Lat plugin (versions ≤1.0.19) poses a direct threat to any systems utilizing this component, potentially allowing unauthorized database access and data exfiltration.

CVE-2026-32368

Q: How to fix CVE-2026-32368?

Within 24 hours: Identify all systems running Geo to Lat plugin version 1.0.19 or earlier and isolate or disable the affected functionality. Within 7 days: Evaluate compensating controls including WAF rule deployment, input validation hardening, and database access restrictions; contact vendor for patch timeline. Within 30 days: Implement a comprehensive remediation plan—either upgrade to a patched version when available, migrate to an alternative solution, or maintain robust compensating controls with continuous monitoring.

EUVD-2026-11863 HIGH

2026-03-13 Patchstack

8.5

CVSS 3.1

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

None

Availability

Low

Lifecycle Timeline

Analysis Generated

Mar 13, 2026 - 16:57 vuln.today

EUVD ID Assigned

Mar 13, 2026 - 16:57 euvd

EUVD-2026-11863

CVE Published

Mar 13, 2026 - 11:42 nvd

HIGH 8.5

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in delphiknight Geo to Lat geo-to-lat allows Blind SQL Injection.This issue affects Geo to Lat: from n/a through <= 1.0.19.

Analysis

Blind SQL injection in Geo to Lat versions up to 1.0.19 allows authenticated attackers to execute arbitrary SQL queries over the network with no user interaction required. An attacker with valid credentials can exploit this vulnerability to extract or manipulate database contents, potentially leading to unauthorized data access and system disruption. …

Remediation

Within 24 hours: Identify all systems running Geo to Lat plugin version 1.0.19 or earlier and isolate or disable the affected functionality. Within 7 days: Evaluate compensating controls including WAF rule deployment, input validation hardening, and database access restrictions; contact vendor for patch timeline. …

Analysis

Detailed AI-generated intelligence summary covering attack vector, impact assessment, affected versions, remediation steps, and indicators of compromise.

POChttps://••••••••••.com/exploit

PATCHhttps://••••••••••.com/patch

ADVISORYhttps://••••••••••.com/advisory

Full analysis requires sign-in

Get intelligence summaries, risk assessment, exploit details, threat intel, and remediation guidance.

Priority Score

Low Medium High Critical

KEV: 0

EPSS: +0.0

CVSS: +42

POC: 0

CVE-2026-32368 vulnerability details – vuln.today

Back

CVE-2026-32368

CVSS Vector

Lifecycle Timeline

Tags

Description

Analysis

Remediation

Analysis

Full analysis requires sign-in

Priority Score

Share

CVE-2026-32368

CVSS Vector

Lifecycle Timeline

Tags

Description

Analysis

Remediation

Full analysis requires sign-in

Priority Score

Share

External POC / Exploit Code