heroplugins

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

heroplugins records in CISA KEV

No heroplugins vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Hero Maps Premium 2 records LOW

Records

2 records in Hero Maps Premium · all components

TI-2019-13804 CVE-2019-19134 · GHSA-q96x-24cf-mf7c

The Hero Maps Premium plugin 2.2.1 and prior for WordPress is prone to unauthenticated…

LOW 36

The Hero Maps Premium plugin 2.2.1 and prior for WordPress is prone to unauthenticated XSS via the views/dashboard/index.php p parameter because it fails to sufficiently sanitize user-supplied input.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.05726 Published 2020-02-26 No fix listed CWE-79

TI-2024-12809 CVE-2024-13781 · GHSA-828w-32v8-434w

Hero Maps Premium - Customizable Google Maps Plugin <= 2.3.9 - Authenticated (Subscriber+) SQL Injection

LOW 29

The Hero Maps Premium plugin for WordPress is vulnerable to SQL Injection via several AJAX actions in all versions up to, and including, 2.3.9 due to insufficient escaping on the user supplied parameter and lack of suffi…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00347 Published 2025-03-07 No fix listed CWE-89

Open these records in search →

Critical	0
High	0
Medium	6
Low	0
No CVSS	0