WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
google-maps-gpx-viewer
Published
2025-02-21
Title
Google Maps GPX Viewer <= 3.6 - Reflected Cross-Site Scripting
Slug
google-maps-ready
Published
2014-09-17
Title
Google Maps Ready! 1.1.5 - CSRF & XSS
Slug
google-maps-travel-route
Published
2025-01-07
Title
Google Maps Travel Route <= 1.3.1 - Authenticated (Subscriber+) SQL Injection
Slug
google-maps-v3-shortcode
Published
2023-02-17
Title
Google Maps v3 Shortcode <= 1.2.1 - Contributor+ XSS
Slug
google-maps-widget
Published
2023-04-06
Title
Maps Widget for Google Maps < 4.25 - Admin+ Stored XSS
Slug
google-mobile-sitemap
Published
2023-03-20
Title
Google XML Sitemap for Mobile <= 1.6.1 - Cross-Site Request Forgery
Slug
google-mp3-audio-player
Published
2014-12-02
Title
Wordpress CodeArt Google MP3 Player - File Disclosure
Slug
google-news
Published
2025-04-24
Title
Google News <= 2.5.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
google-news-editors-picks-news-feeds
Published
2025-03-11
Title
Google News Editors Picks Feed Generator <= 2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
google-news-sitemap
Published
2022-05-04
Title
Andrea Pernici News Sitemap for Google <= 1.0.16 - Contributor+ Stored Cross-Site Scripting
Slug
google-one
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
google-org-chart
Published
2025-01-16
Title
Google Org Chart <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
google-pagespeed-insights
Published
2022-03-08
Title
Google Pagespeed Insights < 4.0.4 - Reflected Cross-Site Scripting
Slug
google-pagespeed-insights
Published
2022-06-27
Title
Insights from Google PageSpeed < 4.0.7 - Multiple CSRF
Slug
google-picasa-albums-viewer
Published
2023-12-26
Title
Google Photos Gallery with Shortcodes < 4.0.3 - Reflected Cross-Site Scripting
Slug
google-places-reviews
Published
2022-05-17
Title
Google Places Review < 2.0.0 - Admin+ Stored Cross Site Scripting
Slug
google-plus-comments
Published
2025-09-26
Title
Google+ Comments <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
google-plus-google
Published
2025-03-20
Title
Google Plus <= 1.0.2 - Reflected Cross-Site Scripting
Slug
google-plus-share-and-plusone-button
Published
2024-11-22
Title
Google Plus Share and +1 Button <= 1.0 - Cross-Site Request Forgery
Slug
google-seo-author-snippets
Published
2016-04-21
Title
Google SEO Pressor Snippet <= 1.2.6 - Reflected Cross-Site Scripting (XSS)
Slug
google-seo-author-snippets
Published
2025-03-31
Title
Google SEO Pressor Snippet <= 2.0 - Missing Authorization
Slug
google-seo-author-snippets
Published
2025-04-01
Title
Google SEO Pressor Snippet <= 2.0 - Cross-Site Request Forgery
Slug
google-shortlink
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
google-site-kit
Published
2020-05-13
Title
Site Kit by Google < 1.8.0 - Privilege Escalation to gain Search Console Access
Slug
google-sitemap-generator
Published
2017-03-01
Title
Google XML Sitemaps <= 4.0.8 - Authenticated Reflected XSS (via HOST header)