title:  Leaflet Maps Marker < 3.12.5 - Admin+ SQLi
description: The Leaflet Maps Marker (Google Maps, OpenStreetMap, Bing Maps) WordPress plugin before 3.12.5 does not properly sanitize some parameters before inserting them into SQL queries. As a result, high privilege users could perform SQL injection attacks.
problem types: CWE-89 SQL Injection
affected:
{
product: Leaflet Maps Marker (Google Maps, OpenStreetMap, Bing Maps)
vendor: Unknown
versions:
lessThan: 3.12.5, status: affected, version: 3.12.5, versionType: custom
}