WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
mapplic-lite
Published
2024-09-25
Title
Mapplic Lite <= 1.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
mappress-google-maps-for-wordpress
Published
2020-04-23
Title
MapPress Maps < 2.53.9 - Authenticated Map Creation/Deletion Leading to Stored Cross-Site Scripting (XSS)
Slug
mappress-google-maps-for-wordpress
Published
2020-05-28
Title
MapPress Maps < 2.54.6 - Improper Capability Checks in AJAX Calls
Slug
mappress-google-maps-for-wordpress
Published
2020-04-23
Title
MapPress Maps Pro < 2.53.9 - Remote Code Execution (RCE) due to Incorrect Access Control in AJAX Actions
Slug
mappress-google-maps-for-wordpress
Published
2022-01-17
Title
MapPress Maps for WordPress < 2.73.4 - Reflected Cross-Site scripting
Slug
mappress-google-maps-for-wordpress
Published
2022-03-14
Title
MapPress Maps for WordPress < 2.73.13 - Admin+ File Upload to Remote Code Execution
Slug
mappress-google-maps-for-wordpress
Published
2023-09-11
Title
MapPress Maps for WordPress < 2.88.5 - Contributor+ Stored XSS
Slug
mappress-google-maps-for-wordpress
Published
2023-04-06
Title
MapPress Maps for WordPress < 2.85.5 - Contributor+ SQL Injection
Slug
mappress-google-maps-for-wordpress
Published
2024-01-02
Title
MapPress Maps for WordPress < 2.88.14 - Contributor+ Stored XSS
Slug
mappress-google-maps-for-wordpress
Published
2024-01-17
Title
MapPress Maps for WordPress < 2.88.15 - Contributor+ Stored XSS
Slug
mappress-google-maps-for-wordpress
Published
2024-01-17
Title
MapPress Maps for WordPress < 2.88.16 - Unauthenticated Arbitrary Private/Draft Post Disclosure
Slug
mappress-google-maps-for-wordpress
Published
2024-01-29
Title
MapPress < 2.88.17 - Contributor+ Stored XSS via Map Settings
Slug
mappress-google-maps-for-wordpress
Published
2024-08-01
Title
MapPress Maps for WordPress < 2.93 - Admin+ Stored XSS via Map Settings
Slug
mappress-google-maps-for-wordpress
Published
2024-11-05
Title
MapPress Maps for WordPress < 2.94.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Map Block
Slug
mappress-google-maps-for-wordpress
Published
2025-03-13
Title
MapPress Maps for WordPress < 2.94.9 - Contributor+ Stored XSS
Slug
mappress-google-maps-for-wordpress
Published
2025-03-27
Title
MapPress Maps for WordPress < 2.94.10 - Admin+ Stored XSS
Slug
maps-for-wp
Published
2025-02-20
Title
Maps for WP < 1.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
maps-for-wp
Published
2025-04-04
Title
Maps for WP < 1.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
maps-for-wp
Published
2025-09-22
Title
Maps for WP <= 1.2.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
mapsmarker
Published
2014-08-01
Title
Leaflet Maps Marker - Multiple security issues
Slug
mapsmarker
Published
2014-08-01
Title
Leaflet Maps Marker - Tag Multiple Parameter SQL Injection
Slug
mapster-wp-maps
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
mapster-wp-maps
Published
2024-01-05
Title
Mapster WP Maps < 1.2.39 - Contributor+ Stored XSS
Slug
mapster-wp-maps
Published
2024-10-24
Title
Mapster WP Maps < 1.6.0 - Incorrect Authorization to Authenticated (Contributor+) Arbitrary Options Update
Slug
mapster-wp-maps
Published
2024-11-15
Title
Mapster WP Maps < 1.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting