A new security issue has come to light, this time involving the Google Maps WordPress plugin. Specifically, it was revealed that the plugin is vulnerable to a SQL Injection attack. The versions that are vulnerable are 7.11.00 to 7.11.17.
SQL Injection attacks are quite dangerous, as they allow hackers to gain access to the user database, take control, and modify a WordPress website .
With this data, the Google Maps WordPress plugin has released an update to address the vulnerability and recommends that all users apply it as soon as possible.
The application of the update is considered necessary by the plugin itself and must be done without delay.
The security issue could be considered a "potential REST API exploit.".
What to do to address vulnerability?
If you have a version between 7.11.00 and 7.11.17 then it is necessary to take action to address the issue. The steps you need to follow are as follows:
- Log in to WordPress.
- Go to the Plugins page or the “Updates” page.
- The WordPress Plugins or Updates screen will notify you if the plugin needs to be updated.
The WP Google Maps plugin is a very popular WordPress plugin and is used by over 400,000 advertisers and businesses. For this reason, it can be easily targeted by hackers.
