WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
mappress-google-maps-for-wordpress
Published
2025-03-27
Title
MapPress Maps for WordPress < 2.94.10 - Admin+ Stored XSS
Slug
mappress-google-maps-for-wordpress
Published
2026-06-05
Title
MapPress Maps for WordPress < 2.97.1 - Unauthenticated Insecure Direct Object Reference via REST API Endpoints
Slug
mappress-google-maps-for-wordpress
Published
2026-06-19
Title
MapPress Maps for WordPress < 2.97.4 - Unauthenticated Stored Cross-Site Scripting
Slug
maps-for-wp
Published
2025-02-20
Title
Maps for WP < 1.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
maps-for-wp
Published
2025-04-04
Title
Maps for WP < 1.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
maps-for-wp
Published
2025-09-22
Title
Maps for WP <= 1.2.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
mapsmarker
Published
2014-08-01
Title
Leaflet Maps Marker - Multiple security issues
Slug
mapsmarker
Published
2014-08-01
Title
Leaflet Maps Marker - Tag Multiple Parameter SQL Injection
Slug
mapster-wp-maps
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
mapster-wp-maps
Published
2024-01-05
Title
Mapster WP Maps < 1.2.39 - Contributor+ Stored XSS
Slug
mapster-wp-maps
Published
2024-10-24
Title
Mapster WP Maps < 1.6.0 - Incorrect Authorization to Authenticated (Contributor+) Arbitrary Options Update
Slug
mapster-wp-maps
Published
2024-11-15
Title
Mapster WP Maps < 1.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
mapster-wp-maps
Published
2025-09-25
Title
Mapster WP Maps < 1.21.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
mapster-wp-maps
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Slug
mapsvg
Published
2022-04-18
Title
MapSVG < 6.2.20 - Unauthenticated SQLi
Slug
mapsvg
Published
2025-05-16
Title
MapSVG < 8.6.11 - Contributor+ Stored XSS
Slug
mapsvg
Published
2025-05-21
Title
MapSVG - All Kinds of Maps and Store Locator for WordPress <= 8.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
mapsvg
Published
2025-05-16
Title
MapSVG < 8.6.13 - Missing Authorization
Slug
mapsvg
Published
2025-05-16
Title
MapSVG < 8.6.11 - Unauthenticated Arbitrary Shortcode Execution
Slug
mapsvg
Published
2025-05-22
Title
MapSVG < 8.6.13 - Missing Authorization
Slug
mapsvg
Published
2025-06-12
Title
MapSVG < 8.7.4 - Contributor+ Arbitrary File Upload
Slug
mapsvg
Published
2025-06-09
Title
MapSVG < 8.6.13 - Contributor+ Privilege Esclation
Slug
mapsvg
Published
2025-08-08
Title
MapSVG < 8.7.4 - Unauthenticated SQL Injection
Slug
mapsvg
Published
2025-07-31
Title
MapSVG < 8.6.12 - Authenticated (Contributor+) Arbitrary File Download
Slug
mapsvg-lite-interactive-vector-maps
Published
2019-01-08
Title
MapSVG Lite < 3.3.0 - Cross-Site Request Forgery (CSRF)