WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-google-map-plugin
Published
2026-04-08
Title
WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters < 4.9.2 - Unauthenticated SQL Injection
Slug
wp-google-map-plugin
Published
2026-04-15
Title
WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters < 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'put_wpgm' Shortcode
Slug
wp-google-map-plugin
Published
2026-04-27
Title
WP Maps < 4.9.3 - Subscriber+ Local File Inclusion
Slug
wp-google-map-plugin
Published
2026-06-05
Title
WP Maps < 4.9.5 - Authenticated (Admin+) Stored Cross-Site Scripting via 'location_messages' Parameter
Slug
wp-google-map-plugin
Published
2026-07-31
Title
WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters < 4.9.7 - Authenticated (Subscriber+) Information Exposure
Slug
wp-google-map-plugin
Published
2026-08-03
Title
WP Maps < 4.9.7 - Subscriber+ Denial of Service
Slug
wp-google-map-plugin
Published
2026-08-03
Title
WP Maps < 4.9.7 - Subscriber+ Local File Inclusion
Slug
wp-google-map-plugin
Published
2026-08-17
Title
WP Maps < 4.9.8 - Subscriber+ Unlimited Autoloaded Option Creation
Slug
wp-google-map-plugin
Published
2026-09-17
Title
WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters < 5.0.0 - Authenticated (Administrator+) SQL Injection
Slug
wp-google-map-plugin
Published
2026-09-24
Title
WP Maps < 5.0.0 - Authenticated (Subscriber+) Local File Inclusion via 'page' Parameter
Slug
wp-google-map-plugin
Published
2026-09-24
Title
WP Maps < 5.0.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via shapes_values Parameter
Slug
wp-google-maps
Published
2014-10-15
Title
WP Google Maps 6.0.26 - Cross Site Scripting (XSS)
Slug
wp-google-maps
Published
2016-11-10
Title
WP Google Maps <= 6.3.14 - Authenticated Stored Cross-Site Scripting (XSS) via CSRF
Slug
wp-google-maps
Published
2019-02-05
Title
WP Google Maps < 7.10.43 - Cross-Site Scripting (XSS)
Slug
wp-google-maps
Published
2019-04-02
Title
WP Google Maps 7.11.00-7.11.17 - Unauthenticated SQL Injection
Slug
wp-google-maps
Published
2019-06-03
Title
WP Google Maps <= 7.11.27 - Admin Settings CSRF
Slug
wp-google-maps
Published
2019-07-08
Title
WP Google Maps <= 7.11.34 - CSRF to Stored XSS
Slug
wp-google-maps
Published
2021-06-07
Title
WP Google Maps < 8.1.12 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
wp-google-maps
Published
2021-06-15
Title
WP Google Maps < 8.1.13 - Multiple Admin+ Stored Cross-Site Scripting
Slug
wp-google-maps
Published
2023-01-20
Title
WP Google Maps < 9.0.16 - Admin+ Path Traversal
Slug
wp-google-maps
Published
2023-12-12
Title
WP Go Maps < 9.0.28 - Unauthenticated Stored XSS
Slug
wp-google-maps
Published
2024-01-23
Title
WP Go Maps (formerly WP Google Maps) < 9.0.29 - Unauthenticated Reflected Cross-Site Scripting
Slug
wp-google-maps
Published
2024-03-12
Title
WP Go Maps (formerly WP Google Maps) < 9.0.33 - Contributor+ Stored Cross-Site Scripting via Shortcode
Slug
wp-google-maps
Published
2024-03-12
Title
WP Go Maps < 9.0.33 - Admin+ Stored Cross-Site Scripting
Slug
wp-google-maps
Published
2024-03-18
Title
WP Go Maps < 9.0.35 - Information Exposure to Potential Denial of Service