A vulnerability categorized as critical has been discovered in Dylan Kuhn Geo Mashup Plugin up to 1.13.19 on WordPress. This affects an unknown function. Such manipulation leads to sql injection. This vulnerability is listed as CVE-2026-48967 . The attack may be performed from remote. There is no available exploit.