CVE Catalog

CVE-2026-73183

CriticalCVSS 9.3
Published: Updated: Translated: NVD NIST

Summary

SQL Injection vulnerability in Maps Marker Pro plugin versions up to and including 4.32. An unauthenticated attacker can inject SQL queries, potentially leading to unauthorized database access.

Risk Assessment

Risk includes data leakage, modification or deletion of database data, and in extreme cases server takeover. The attack can be performed remotely without authentication.

Recommendation

Update the Maps Marker Pro plugin to a version newer than 4.32. Also check for potential data breach.

Original NVD description (English source)

Unauthenticated SQL Injection in Maps Marker Pro <= 4.32 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS