WordPress security by component

Hero Maps Premium

Plugin description

Hero Maps Premium is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Mar 07, 2025; the highest CVE/CNA score is 6.5.

Plugin slug: hero-maps-premium

Latest vulnerability

CVE-2024-13781: Hero Maps Premium: SQL injection

Hero Maps Premium is affected by SQL injection. Exploitation requires at least subscriber-level access. A successful request can alter database queries and expose or modify WordPress data.

PublishedMar 07, 2025

Safe version guidanceSee mitigation notes

		Safe version
Mar 07, 2025	CVE-2024-13781 Hero Maps Premium: SQL injection Hero Maps Premium is affected by SQL injection. Exploitation requires at least subscriber-level access. A successful request can alter database queries and expose or modify WordPress data.	See mitigation notes	CVE6.5 NVD6.5
Feb 26, 2020	CVE-2019-19134 Hero Maps Premium: Cross-site scripting Hero Maps Premium is affected by cross-site scripting. The vulnerable path is reachable without authentication. Injected script can execute in the affected site's origin when the vulnerable output is viewed.	See mitigation notes	CVE6.1 NVD6.1