CVE-2022-1123: Mapsmarker Leaflet Maps Marker

High severity, CVSS 7.2. EPSS: 1.3% chance of exploitation in the next 30 days.

The Leaflet Maps Marker (Google Maps, OpenStreetMap, Bing Maps) WordPress plugin before 3.12.5 does not properly sanitize some parameters before inserting them into SQL queries. As a result, high privilege users could perform SQL injection attacks.

Affected products

• Mapsmarker Leaflet Maps Marker: before 3.12.5 (fixed in 3.12.5)

Published 2022-08-29. Last modified 2026-06-17.