CVE-2021-24130: Weplugins Wp Maps

High severity, CVSS 7.2. EPSS: 1.4% chance of exploitation in the next 30 days.

Unvalidated input in the WP Google Map Plugin WordPress plugin, versions before 4.1.5, in the Manage Locations page within the plugin settings was vulnerable to SQL Injection through a high privileged user (admin+).

Affected products

• Weplugins Wp Maps: before 4.1.5 (fixed in 4.1.5)

Published 2021-03-18. Last modified 2026-06-17.