Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: 10web Component: Map Builder For Google Maps Clear all filters
TI-2023-24262 CVE-2023-45272 · GHSA-qpgp-454m-6h35

WordPress 10Web Map Builder for Google Maps plugin <= 1.0.73 - Notice Dismissal Vulnerability

Priority LOW 24

Missing Authorization vulnerability in 10Web 10Web Map Builder for Google Maps allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 10Web Map Builder for Google Maps: from n/a throug…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00301 Published 2025-01-02 No fix listed CWE-862
TI-2024-20505 CVE-2024-31116 · GHSA-5mvp-x2wm-jfrh

WordPress 10Web Map Builder for Google Maps plugin <= 1.0.74 - SQL Injection vulnerability

Priority LOW 36

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in 10Web 10Web Map Builder for Google Maps.This issue affects 10Web Map Builder for Google Maps: from n/a through 1.0.74.

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00541 Published 2024-03-31 No fix listed CWE-89
TI-2023-00035 CVE-2023-0037 · GHSA-6gc2-7235-x8mp

10WebMapBuilder < 1.0.73 - Unauthenticated SQLi

Priority HIGH 82

The 10Web Map Builder for Google Maps WordPress plugin before 1.0.73 does not properly sanitise and escape some parameters before using them in an SQL statement via an AJAX action available to unauthenticated users, lead…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03911 Published 2023-03-13 Fixed in 1.0.73
TI-2022-04354 CVE-2022-4758 · GHSA-mmm6-292h-j64g

10WebMapBuilder < 1.0.72 - Contributor+ Stored XSS via Shortcode

Priority MEDIUM 58

The 10WebMapBuilder WordPress plugin before 1.0.72 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perfo…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00476 Published 2023-01-23 Fixed in 1.0.72