Skip to content
Sign in
3.7 Low

CVE-2026-15381 The WP Go Maps WordPress plugin before 10.1.04 does not properly sanitise and escape a parameter before using it in a…

Description

The WP Go Maps WordPress plugin before 10.1.04 does not properly sanitise and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks.

Affected products and versions

Product Affected versions Fixed in
WP Go Maps 10.1 earliest → < 10.1.04 10.1.04

Other CVEs of WP Go Maps

The 3 CVEs of WP Go Maps →
CVE-2026-8386 The WP Go Maps WordPress plugin before 10.0.10 does not perform any approval-state filtering on its public… 5.3 Medium CVE-2026-8385 The WP Go Maps WordPress plugin before 10.0.10 does not properly enforce the marker approval filter on the admin-ajax… 5.3 Medium
Track this CVE