CVE-2026-73183: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in Get Maps Marker Pro Maps Marker Pro

CVE-2026-73183 is an unauthenticated SQL Injection vulnerability (CWE-89) in Maps Marker Pro, affecting versions up to 4.32. The vulnerability allows attackers to inject malicious SQL commands without authentication, potentially compromising data confidentiality and causing partial denial of service. The CVSS 3.1 base score is 9.3 (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L), reflecting network attack vector, low attack complexity, no privileges or user interaction required, and a scope change with high confidentiality impact and low availability impact. No vendor advisory or patch information is provided in the source data.

The vulnerability enables unauthenticated attackers to perform SQL Injection attacks, potentially leading to unauthorized disclosure of sensitive data (high confidentiality impact) and partial denial of service (availability impact). The integrity impact is reported as none. The vulnerability is exploitable remotely without any privileges or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch information is provided in the input data. Until a patch is available, users should monitor vendor communications for updates and consider applying any recommended temporary mitigations if provided.