SQL Injection

Every one of the 4 is a mark on the map. Named now: 1 to 4, most at risk first.

1. WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters <= 4.9.1 - Unauthenticated SQL Injection via 'orderby' ParameterCVE-2026-2580flippercode · CVSS 7.5 · 0.5% likely

   CWE-89

2. WP Maps <= 4.9.1 - Unauthenticated SQL Injection via 'location_id' ParameterCVE-2026-3222flippercode · CVSS 7.5 · 0.5% likely

   CWE-89

3. WordPress Plugin for Google Maps – WP MAPS <= 4.6.1 - Authenticated (Contributor+) SQL InjectionCVE-2024-2386flippercode · CVSS 8.8 · 0.5% likely

   CWE-89

4. WordPress WP Maps plugin <= 4.9.9 - SQL Injection vulnerabilityCVE-2026-66618Flipper Code · CVSS 7.6 · 0.4% likely

   CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.