CVE-2022-1123

HIGH 7.2CVE-2022-1123 · Published 29/08/2022 · updated 17/06/2026

In short

CVE-2022-1123 is a HIGH (CVSS 7.2) vulnerability affecting leaflet maps marker (mapsmarker).
Chance of exploitation in the next 30 days (EPSS): 1.4%, higher than 71.8% of all vulnerabilities.
Fix: update to 3.12.5 or later.

Package	Affected versions	Patched versions
leaflet maps marker mapsmarker	`< 3.12.5`	`3.12.5`

Description

The Leaflet Maps Marker (Google Maps, OpenStreetMap, Bing Maps) WordPress plugin before 3.12.5 does not properly sanitize some parameters before inserting them into SQL queries. As a result, high privilege users could perform SQL injection attacks.

References

wpscan.com/vulnerability/03e0d4d5-0184-4a15-b8ac-fdc2010e4812 · Exploit

More vulnerabilities in leaflet maps marker

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free