CVE-2026-2580 | flippercode WP Maps Plugin up to 4.9.1 on WordPress Parameter orderby sql injection (EUVD-2026-14335)

A vulnerability categorized as critical has been discovered in flippercode WP Maps Plugin up to 4.9.1 on WordPress. Affected is an unknown function of the component Parameter Handler. Such manipulation of the argument orderby leads to sql injection.

This vulnerability is uniquely identified as CVE-2026-2580. The attack can be launched remotely. No exploit exists.

It is advisable to upgrade the affected component.