WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
map-categories-to-pages
Published
2025-09-26
Title
Map Categories to Pages <= 1.3.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
map-contact
Published
2025-03-24
Title
Map Contact <= 3.0.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
map-location-picker-at-checkout-for-woocommerce
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
map-location-picker-at-checkout-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
map-location-picker-at-checkout-for-woocommerce
Published
2024-01-31
Title
Location Picker at Checkout for WooCommerce < 1.9.0 - Missing Authorization via checkout_map_rules_order_ajax_handler
Slug
map-location-picker-at-checkout-for-woocommerce
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Slug
map-multi-marker
Published
2023-01-13
Title
Map Multi Marker <= 3.2.1 - Reflected Cross-Site Scripting
Slug
map-my-locations
Published
2025-07-17
Title
Map My Locations <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
map-store-location
Published
2024-11-08
Title
Map Store Locator <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
mapbox-for-wp-advanced
Published
2025-01-14
Title
Mapbox for WP Advanced <= 1.0.0 - Reflected Cross-Site Scripting
Slug
mapfig-premium-leaflet-map-maker
Published
2025-02-21
Title
AcuGIS Leaflet Maps <= 5.1.1.0 - Unauthenticated Stored Cross-Site Scripting
Slug
mapfig-studio
Published
2024-06-05
Title
MapFig Studio <= 0.2.1 - Stored XSS via CSRF
Slug
mapifylite
Published
2021-03-24
Title
MapifyLite & MapifyPro < 4.0.0 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
mapifylite-master
Published
2021-03-24
Title
MapifyLite & MapifyPro < 4.0.0 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
mapmap
Published
2025-11-03
Title
MapMap <= 1.1 - Cross-Site Request Forgery to Settings Update and Stored Cross-Site Scripting
Slug
mapme
Published
2024-11-08
Title
Mapme <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
mapping-multiple-urls-redirect-same-page
Published
2022-03-01
Title
Mapping Multiple URLs Redirect Same Page <= 5.8 - Reflected Cross-Site Scripting
Slug
mapplic
Published
2021-03-23
Title
Mapplic and Mapplic Lite - SSRF to Stored Cross-Site Scripting (XSS)
Slug
mapplic-lite
Published
2021-03-23
Title
Mapplic and Mapplic Lite - SSRF to Stored Cross-Site Scripting (XSS)
Slug
mapplic-lite
Published
2024-09-25
Title
Mapplic Lite <= 1.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
mappress-google-maps-for-wordpress
Published
2020-04-23
Title
MapPress Maps < 2.53.9 - Authenticated Map Creation/Deletion Leading to Stored Cross-Site Scripting (XSS)
Slug
mappress-google-maps-for-wordpress
Published
2020-05-28
Title
MapPress Maps < 2.54.6 - Improper Capability Checks in AJAX Calls
Slug
mappress-google-maps-for-wordpress
Published
2020-04-23
Title
MapPress Maps Pro < 2.53.9 - Remote Code Execution (RCE) due to Incorrect Access Control in AJAX Actions
Slug
mappress-google-maps-for-wordpress
Published
2022-01-17
Title
MapPress Maps for WordPress < 2.73.4 - Reflected Cross-Site scripting
Slug
mappress-google-maps-for-wordpress
Published
2022-03-14
Title
MapPress Maps for WordPress < 2.73.13 - Admin+ File Upload to Remote Code Execution