Back to Database
Status published
High
CVE-2024-31116
WordPress 10Web Map Builder for Google Maps plugin <= 1.0.74 - SQL Injection vulnerability
Vulnerability Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in 10Web 10Web Map Builder for Google Maps.This issue affects 10Web Map Builder for Google Maps: from n/a through 1.0.74.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-31116
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Muhammad Daffa (Patchstack Alliance)
More from 10Web
View All →CVE-2025-48341
WordPress Form Maker by 10Web plugin <= 1.15.33 - Cross Site Scripting (XSS) Vulnerability
Medium
5.9
CVE-2024-44043
WordPress Photo Gallery by 10Web plugin <= 1.8.27 - Cross Site Scripting (XSS) vulnerability
Medium
5.9
CVE-2024-32578
WordPress Sliderby10Web plugin <= 1.2.54 - Cross Site Scripting (XSS) vulnerability
High
7.1
CVE-2024-29833
WordPress Photo Gallery Plugin <= 1.8.21 Stored Cross Site Scripting in UploadHandler
Medium
5.4
CVE-2024-29832
WordPress Photo Gallery Plugin <= 1.8.21 Unauthenticated Reflected Cross Site Scripting in GalleryBox current_url
Medium
6.1
Affected Vendor
10Web
View all reports →Affected Software
10Web Map Builder for Google Maps
Vulnerable Versions:
Unknown
Timeline
Official Publish:
March 31st, 2024
Last Modified:
April 28th, 2026
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L