CVE-2019-10692

Critical

In the wp-google-maps plugin before 7.11.18 for WordPress, includes/class.rest-api.php in the REST API does not sanitize field names before…

mitre·CWE-89·Published 2019-04-02

CVSS

9.8

EPSS

0.79

KEV

Exploits

cve.orgen

159 chars

In the wp-google-maps plugin before 7.11.18 for WordPress, includes/class.rest-api.php in the REST API does not sanitize field names before a SELECT statement.

NVDen

159 chars

In the wp-google-maps plugin before 7.11.18 for WordPress, includes/class.rest-api.php in the REST API does not sanitize field names before a SELECT statement.

En el plugin wp-google-maps, en versiones anteriores a la 7.11.18 para WordPress, includes/class.rest-api.php en la API REST no sanea los nombres de campo antes de una instrucción SELECT.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	7.5	10.0	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P
3.1	Primary	NVD	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H