Vulnerabilities

TI-2024-12809 CVE-2024-13781 · GHSA-828w-32v8-434w

Hero Maps Premium - Customizable Google Maps Plugin <= 2.3.9 - Authenticated (Subscriber+) SQL Injection

LOW 29

The Hero Maps Premium plugin for WordPress is vulnerable to SQL Injection via several AJAX actions in all versions up to, and including, 2.3.9 due to insufficient escaping on the user supplied parameter and lack of suffi…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00347 Published 2025-03-07 No fix listed CWE-89

TI-2019-13804 CVE-2019-19134 · GHSA-q96x-24cf-mf7c

The Hero Maps Premium plugin 2.2.1 and prior for WordPress is prone to unauthenticated…

LOW 36

The Hero Maps Premium plugin 2.2.1 and prior for WordPress is prone to unauthenticated XSS via the views/dashboard/index.php p parameter because it fails to sufficiently sanitize user-supplied input.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.05726 Published 2020-02-26 No fix listed CWE-79

Vulnerabilities

Filters

Hero Maps Premium - Customizable Google Maps Plugin <= 2.3.9 - Authenticated (Subscriber+) SQL Injection

The Hero Maps Premium plugin 2.2.1 and prior for WordPress is prone to unauthenticated…