Maps Marker Pro
Monthly
Unauthenticated SQL injection in the Maps Marker Pro WordPress plugin (all versions up to and including 4.32) lets remote attackers inject arbitrary SQL against the site database without any credentials or user interaction. Reported by Patchstack and rated CVSS 9.3, the flaw exposes the backing WordPress database to unauthenticated extraction. No public exploit has been identified at the time of analysis and the CVE is not listed in CISA KEV.
Unauthenticated SQL injection in the Maps Marker Pro WordPress plugin (all versions up to and including 4.32) lets remote attackers inject arbitrary SQL against the site database without any credentials or user interaction. Reported by Patchstack and rated CVSS 9.3, the flaw exposes the backing WordPress database to unauthenticated extraction. No public exploit has been identified at the time of analysis and the CVE is not listed in CISA KEV.