https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 17:19:03 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-287526 EUVD-2026-287526 https://cve.radiocsirt.org/vuln/euvd-2026-287526 https://cve.radiocsirt.org/vuln/fkie_cve-2026-3222 <p>The WP Maps plugin for WordPress is vulnerable to time-based blind SQL Injection via the &#39;location_id&#39; parameter in all versions up to, and including, 4.9.1. This is due to the plugin&#39;s database abstraction layer (`FlipperCode_Model_Base::is_column()`) treating user input wrapped in backticks as column names, bypassing the `esc_sql()` escaping function. Additionally, the `wpgmp_ajax_call` AJAX handler (registered for unauthenticated users via `wp_ajax_nopriv`) allows calling arbitrary class methods including `wpgmp_return_final_capability`, which passes the unsanitized `location_id` GET parameter directly to a database query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.</p> <p>The WP Maps plugin for WordPress is vulnerable to time-based blind SQL Injection via the &#39;location_id&#39; parameter in all versions up to, and including, 4.9.1. This is due to the plugin&#39;s database abstraction layer (`FlipperCode_Model_Base::is_column()`) treating user input wrapped in backticks as column names, bypassing the `esc_sql()` escaping function. Additionally, the `wpgmp_ajax_call` AJAX handler (registered for unauthenticated users via `wp_ajax_nopriv`) allows calling arbitrary class methods including `wpgmp_return_final_capability`, which passes the unsanitized `location_id` GET parameter directly to a database query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-3222 https://cve.radiocsirt.org/vuln/ghsa-4pfw-7fxf-mmv5 <p>The WP Maps plugin for WordPress is vulnerable to time-based blind SQL Injection via the &#39;location_id&#39; parameter in all versions up to, and including, 4.9.1. This is due to the plugin&#39;s database abstraction layer (`FlipperCode_Model_Base::is_column()`) treating user input wrapped in backticks as column names, bypassing the `esc_sql()` escaping function. Additionally, the `wpgmp_ajax_call` AJAX handler (registered for unauthenticated users via `wp_ajax_nopriv`) allows calling arbitrary class methods including `wpgmp_return_final_capability`, which passes the unsanitized `location_id` GET parameter directly to a database query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.</p> <p>The WP Maps plugin for WordPress is vulnerable to time-based blind SQL Injection via the &#39;location_id&#39; parameter in all versions up to, and including, 4.9.1. This is due to the plugin&#39;s database abstraction layer (`FlipperCode_Model_Base::is_column()`) treating user input wrapped in backticks as column names, bypassing the `esc_sql()` escaping function. Additionally, the `wpgmp_ajax_call` AJAX handler (registered for unauthenticated users via `wp_ajax_nopriv`) allows calling arbitrary class methods including `wpgmp_return_final_capability`, which passes the unsanitized `location_id` GET parameter directly to a database query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.</p> https://cve.radiocsirt.org/vuln/ghsa-4pfw-7fxf-mmv5