Medium 5.4
2024-07-21< 3.12.10
CVE-2024-38782
Minimum safe version
3.12.10
Update to 3.12.10 or later to address 9 fixable vulnerabilities
CVE-2024-38782
WordPress Leaflet Maps Marker Plugin <= 3.12.8 is vulnerable to Cross Site Scripting (XSS)
Leaflet Maps Marker 3.5.2 - Two SQL Injection Vulnerabilities
CVE-2022-4677
Leaflet Maps Marker (Google Maps, OpenStreetMap, Bing Maps) < 3.5.4 - Cross-Site Scripting
CVE-2012-2913
CVE-2022-1123
WordPress Leaflet Maps Marker Plugin <= 2.3 - Multipe Vulnerabilities
WordPress Leaflet Maps Marker Plugin <= 3.5.3 - SQL Injection