CVE Catalog
CVE-2026-39492
CriticalCVSS 9.3Exploitation Probability (EPSS)
Low risk0.36%
28th percentile — higher than 28% of all known CVEs
Summary
There is an unauthenticated SQL injection vulnerability in WP Maps versions up to 4.9.1.
Risk Assessment
An attacker could exploit this vulnerability to gain access to the database, potentially exposing sensitive information.
Recommendation
It is recommended to update WP Maps to the latest version to mitigate this vulnerability.
Original NVD description (English source)
Unauthenticated SQL Injection in WP Maps <= 4.9.1 versions.