S4E just found a medium-severity finding from leaked token-api key scanner
PlatformPlansPartners
Resources
ToolsBlogDocs
Sign Up →
high·Product Based Web Vulnerabilities·Updated Aug 18, 2026

CVE-2026-4060 Scanner

CVE-2026-4060 Scanner - SQL Injection vulnerability in Geo Mashup WordPress Plugin

Est. Time~10 seconds
Scan TypeSingle Scan
Targetsdomain, subdomain, ipv4
CostFree
2.1k
Times Used
continuous scan runs
5.8k
Continuously Checked
assets under CS
0
Vulnerabilities Found
confirmed findings
References
CVECVE-2026-4060
7.5
CVSShigh
Exploitable remotely over the internet · no authentication required.

The Geo Mashup plugin for WordPress is vulnerable to Time-Based SQL Injection via the 'sort' parameter in all versions up to, and including, 1.13.18. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. The `esc_sql()` function is applied but is ineffective in the `ORDER BY` context because the value is not enclosed in quotes. Additionally, while a `sanitize_sort_arg()` allowlist-based sanitizer was added in version 1.13.18, it is only applied in the AJAX code path (`sanitize_query_args()`) and not in the `render-map.php` or template tag code paths. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database via a time-based blind approach.

Attack Vector
Network
Privileges Req.
None
User Interaction
None
Affected
Geo Mashupby cyberhobo
0
Updated Sep 10, 2026View on NVD →
Detail

Geo Mashup is a widely used WordPress plugin that allows users to display maps on their WordPress websites, integrating geographic data into content. It is frequently used by bloggers, businesses, and institutions alike, who need to visually represent locations in relation to specific content. This plugin helps enhance user engagement by providing interactive map features, which enables the seamless integration of spatial data on any WordPress site. The plugin accommodates customized maps, supports multiple formats, and is extendable with additional map features. Geo Mashup is especially popular among travel bloggers, real estate websites, and any WordPress site looking to add geographical visualizations. It is valued for its ease of use and flexibility, which allows even novice users to integrate complex maps.

SQL Injection is a type of vulnerability that allows an attacker to interfere with the queries application makes to its database. It generally allows unauthorized viewing of data that is not supposed to be displayed, potentially altering data as well. In the case of Geo Mashup WordPress plugin, the vulnerability exists via the 'sort' parameter, which lacks sufficient input sanitization. This could allow attackers to execute arbitrary SQL queries against the database, leading to data exposure or manipulation. Time-based blind SQL Injection can be particularly harmful as it may be exploited to stealthy extract sensitive data without leaving much trace. This vulnerability represents a significant risk if left unpatched, compromising the security and integrity of the database.

The vulnerability in the Geo Mashup plugin stems from the insufficient sanitization of the 'sort' parameter within certain code paths of the 'render-map.php/template' file. This enables attackers to inject time-based SQL code into queries made by the plugin. Specifically, this occurs when input parameters are not correctly filtered, allowing attackers to leverage a blind SQL Injection attack. The payload can exploit a sleep function in SQL that delays the execution of queries if true conditions are met, thereby inferring data through the duration of the response. The failure to sanitize input through the 'sort' parameter directly contributes to this vulnerability, as seen in the supplied HTTP requests targeting 'Geo Mashup' content creations. Understanding these technical intricacies is crucial for effective remediation and prevention strategies.

If the SQL Injection vulnerability in the Geo Mashup plugin is exploited, attackers can gain unauthorized access to the database, extracting sensitive information or altering data. This could lead to the compromise of user's personal information, business data, or site control. Potential damages include data leakage or corruption, unauthorized administrative actions, and downtime due to database manipulation. The vulnerability can be exploited by attackers to execute arbitrary SQL commands, potentially giving them the ability to pivot and further exploit affected systems. Ultimately, it could erode user trust and lead to significant reputational and financial damage if the vulnerability is left untreated.

REFERENCES

Solution Advice
  • Update Geo Mashup to the latest version to ensure that vulnerabilities related to SQL injection are patched.
  • Regularly review and sanitize inputs that interact with the database to prevent SQL Injection.
  • Implement robust access controls on databases to minimize the impact if SQL Injection vulnerabilities are present.
  • Monitor web applications for suspicious activity indicative of SQL Injection attempts.
  • Educate developers on secure coding practices to prevent similar vulnerabilities in the future.

Get AI-powered remediation steps tailored to your asset.

Try AI Solutions →

Check your infrastructure.
Right now.

11,000+ scanners. Free to start. No credit card required.