WordPress plugin
10Web Map Builder for Google Maps security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical3
- High1
- Medium3
- Low0
All 10Web Map Builder for Google Maps vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Critical9.1 | Authenticated (Administrator+) SQL Injection ≤1.0.74No patch available | CVE-2024-31116 | |
| Medium4.3 | Missing Authorization to Notice Dismissal <1.0.74Update to 1.0.74 | CVE-2023-45272 | |
| Critical9.8 | Unauthenticated SQL Injection via Multiple Parameters ≤1.0.72Update to 1.0.73 | CVE-2023-0037 | |
| Critical9.8 | Unauthenticated SQL Injection ≤1.0.72Update to 1.0.73 | — | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode ≤1.0.71Update to 1.0.72 | CVE-2022-4758 | |
| Medium6.4 | Authenticated Stored Cross-Site Scripting <1.0.70Update to 1.0.70 | — | |
| High7.2 | Unauthenticated Stored Cross-Site Scripting via Plugin Settings Change <1.0.64Update to 1.0.64 | CVE-2020-36853 |
- Critical9.1Authenticated (Administrator+) SQL Injection
≤1.0.74No patch available
- Medium4.3Missing Authorization to Notice Dismissal
<1.0.74Update to 1.0.74
- Critical9.8Unauthenticated SQL Injection via Multiple Parameters
≤1.0.72Update to 1.0.73
- Critical9.8Unauthenticated SQL Injection
≤1.0.72Update to 1.0.73
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
≤1.0.71Update to 1.0.72
- Medium6.4Authenticated Stored Cross-Site Scripting
<1.0.70Update to 1.0.70
- High7.2Unauthenticated Stored Cross-Site Scripting via Plugin Settings Change
<1.0.64Update to 1.0.64
10Web Map Builder for Google Maps: common questions
Does 10Web Map Builder for Google Maps have known vulnerabilities?
Yes. VulnCrest Radar lists 7 known vulnerabilities in 10Web Map Builder for Google Maps: 3 critical, 1 high, 3 medium. At least one is not fixed in the latest version.
How do I check which version of 10Web Map Builder for Google Maps I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent 10Web Map Builder for Google Maps vulnerability?
CVE-2024-31116, published Mar 29, 2024: 10Web Map Builder for Google Maps <= 1.0.74 - Authenticated (Administrator+) SQL Injection. Severity: Critical (CVSS 9.1).
Is any 10Web Map Builder for Google Maps vulnerability listed in CISA KEV?
No. None of the known 10Web Map Builder for Google Maps vulnerabilities is currently listed in the CISA KEV catalog.