WordPress 10Web Map Builder < 1.0.73 - Unauthenticated SQL Injection
CVE-2023-0037
Verified
Description
The 10Web Map Builder for Google Maps WordPress plugin before 1.0.73 does not properly sanitise and escape some parameters before using them in an SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection
Severity
Critical
CVSS Score
9.8
Exploit Probability
4%
Affected Product
map_builder_for_google_maps
Published Date
September 10, 2025
Template Author
riteshs4hu
CVE-2023-0037.yaml
9.8Score
CVSS Metrics
CVSS Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVE ID:
cve-2023-0037
CWE ID:
cwe-89
Remediation Steps
Fixed in 1.0.73