Approved changes feed: RSS · Atom

cpe:2.3:a:supsystic:ultimate_maps:1.2.8:*:*:*:*:wordpress:*:*

part: a version: 1.2.8 update: *

VendorSupsystic (31a63952-7184-5307-ada0-8934fe420f61)
ProductUltimate Maps (8a791986-9568-5ff3-b2e0-2959c9f7e804)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-37242 vulnerable 2026-06-03 14:42:41.093030 WordPress Plugin Supsystic Ultimate Maps 1.1.12 SQL Injection via sidx
HIGH (8.2)
Supsystic Ultimate Maps 1.1.12 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'sidx' GET parameter. Attackers can send crafted requests to the getListForTbl action with boolean-based blind or time-based blind SQL injection payloads to extract sensitive database information.
Published: 2026-05-16T15:25:57.854Z
Updated: 2026-05-18T12:55:04.799Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.