CVE-2026-6457 | cyberhobo Geo Mashup Plugin up to 1.13.19 on WordPress geo_mashup_null_fields sql injection

A vulnerability classified as critical was found in cyberhobo Geo Mashup Plugin up to 1.13.19 on WordPress. Affected by this vulnerability is an unknown functionality. The manipulation of the argument geo_mashup_null_fields results in sql injection.

This vulnerability is reported as CVE-2026-6457. The attack can be launched remotely. No exploit exists.