CVE-2026-48967
HighCVSS 8.5Summary
There is a SQL Injection vulnerability in Geo Mashup versions <= 1.13.19 that may allow unauthorized access to the database.
Risk Assessment
An attacker could exploit this vulnerability to manipulate database data, potentially leading to the disclosure of sensitive information or data deletion.
Recommendation
It is recommended to upgrade to the latest version of Geo Mashup to mitigate this vulnerability.
Other vulnerabilities in Geo Mashup
See all- CVE-2026-42734High
CVE-2026-42734 describes an improper neutralization of input during web page generation, leading to Cross-site Scripting (XSS) vulnerabilities in Geo Mashup. The issue affects versions from n/a through 1.13.19.
- CVE-2026-66450High
Unauthenticated Local File Inclusion vulnerability in Geo Mashup versions up to 1.13.18.
- CVE-2026-66449High
Unauthenticated Cross Site Scripting (XSS) vulnerability in Geo Mashup versions up to 1.13.18.
- CVE-2026-27427Medium
The Geo Mashup WordPress plugin up to version 1.13.18 contains a Stored Cross-Site Scripting vulnerability due to improper input neutralization during page generation.
Original NVD description (English source)
Subscriber SQL Injection in Geo Mashup <= 1.13.19 versions.