Threats tagged 'ghsa-55gh-xjv7-5vwp'

CVE-2026-15381 is a SQL injection vulnerability in the WP Go Maps WordPress plugin versions before 10.1.04. The plugin fails to properly sanitize and escape a parameter used in a SQL query, allowing unauthenticated users to perform SQL injection attacks. The vulnerability has a low CVSS score of 3.7 and does not require user interaction or privileges to exploit, but has high attack complexity. No official patch or remediation guidance is currently available.