Mapsmarker

3 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-38782 Jul 21, 22:15 MEDIUM This Month

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in MapsMarker.Com e.U. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Leaflet Maps Marker Mapsmarker

NVD

CVSS 3.1

5.4

EPSS

0.3%

CVE-2022-1123 Aug 29, 18:15 HIGH POC This Week

The Leaflet Maps Marker (Google Maps, OpenStreetMap, Bing Maps) WordPress plugin before 3.12.5 does not properly sanitize some parameters before inserting them into SQL queries. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

WordPress SQLi Google Leaflet Maps Marker Mapsmarker

NVD WPScan

CVSS 3.1

7.2

EPSS

1.1%

CVE-2012-2913 May 21, 18:55 MEDIUM POC This Month

Multiple cross-site scripting (XSS) vulnerabilities in the Leaflet plugin 0.0.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the id parameter to (1). Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

PHP WordPress XSS Leaflet Maps Marker Plugin Mapsmarker

NVD Exploit-DB

CVSS 2.0

4.3

EPSS

0.4%

CVE-2024-38782

EPSS 0% CVSS 5.4

MEDIUM This Month

XSS Leaflet Maps Marker Mapsmarker

NVD

CVE-2022-1123

EPSS 1% CVSS 7.2

HIGH POC This Week

WordPress SQLi Google +2

NVD WPScan

CVE-2012-2913

EPSS 0% CVSS 4.3

MEDIUM POC This Month

PHP WordPress XSS +2

NVD Exploit-DB