anonhaven

CVE-2026-15381

NONE EPSS 0.18%
Updated Jul 31, 2026
Unknown
Parameter Value
Affected Versions before 10.1.04
Type CWE-89 SQL Injection
Vendor Unknown
Public PoC No

The WP Go Maps WordPress plugin before 10.1.04 does not properly sanitise and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks.

Weakness Type (CWE)

CWE-89 SQL Injection

Vulnerable Products

unknown:wp go maps

References 1

https://wpscan.com/vulnerability/9676af2f-8871-4715-b420-082b1afeb7b4/
NVD
Share Post Share Share Share

Related Vulnerabilities

CVE-2026-8155

Unknown

None

CVE-2026-15258

Unknown

None

CVE-2026-15209

Unknown

None

CVE-2026-15048

Unknown

None

CVE-2026-14931

Unknown

None