WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-google-fonts
Published
2015-08-19
Title
WP Google Fonts <= 3.1.3 - Authenticated Reflected Cross-Site Scripting (XSS)
Slug
wp-google-fonts
Published
2021-11-03
Title
WP Google Fonts < 3.1.5 - Reflected Cross-Site Scripting
Slug
wp-google-map
Published
2025-10-14
Title
WP Google Map Plugin <= 1.0 - Authenticated (Contributor+) SQL Injection
Slug
wp-google-map-gold
Published
2025-04-17
Title
Advanced Google Maps < 5.8.5 - Missing Authorization
Slug
wp-google-map-plugin
Published
2015-08-20
Title
WP Google Map Plugin < 3.0.0 - CSRF to Authenticated Cross-Site Scripting (XSS)
Slug
wp-google-map-plugin
Published
2018-04-27
Title
WP Google Map < 4.0.4 - XSS
Slug
wp-google-map-plugin
Published
2016-07-27
Title
WP Google Map Plugin < 3.1.2 - XSS
Slug
wp-google-map-plugin
Published
2015-04-24
Title
WP Google Map Plugin < 2.3.7 - XSS
Slug
wp-google-map-plugin
Published
2015-08-21
Title
WP Google Map Plugin < 2.3.10 - Multiple CSRF
Slug
wp-google-map-plugin
Published
2019-09-19
Title
WP Google Map Plugin < 4.1.0 - CSRF to Unauthenticated PHP Object Injection
Slug
wp-google-map-plugin
Published
2020-11-25
Title
WP Google Map Plugin < 4.1.5 - Authenticated SQL Injection
Slug
wp-google-map-plugin
Published
2023-01-20
Title
WP Google Map < 4.4.0 - Editor+ Stored XSS
Slug
wp-google-map-plugin
Published
2022-02-22
Title
WP Google Map < 4.2.4 - Marker Category/Map Deletion via CSRF
Slug
wp-google-map-plugin
Published
2022-03-13
Title
WP Google Map < 4.4.3 - Category/Location/Map Deletion via CSRF
Slug
wp-google-map-plugin
Published
2024-06-28
Title
WordPress Plugin for Google Maps – WP MAPS < 4.6.2 - Authenticated (Contributor+) SQL Injection
Slug
wp-google-map-plugin
Published
2025-04-10
Title
WP Maps < 4.7.2 - Admin+ Stored XSS
Slug
wp-google-map-plugin
Published
2025-04-10
Title
WP Maps < 4.7.2 - Admin+ Stored XSS
Slug
wp-google-map-plugin
Published
2025-04-10
Title
WP Maps < 4.7.2 - Admin+ Stored XSS
Slug
wp-google-map-plugin
Published
2025-11-02
Title
Maps < 4.8.7 - Authenticated (Administrator+) PHP Object Injection
Slug
wp-google-map-plugin
Published
2026-02-16
Title
WP Maps < 4.8.7 - Subscriber+ Limited Local File Inclusion
Slug
wp-google-map-plugin
Published
2026-03-10
Title
WP Maps < 4.9.2 - Unauthenticated SQL Injection via 'location_id' Parameter
Slug
wp-google-map-plugin
Published
2026-03-22
Title
WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters < 4.9.2 - Unauthenticated SQL Injection via 'orderby' Parameter
Slug
wp-google-map-plugin
Published
2026-04-08
Title
WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters < 4.9.2 - Unauthenticated SQL Injection
Slug
wp-google-map-plugin
Published
2026-04-15
Title
WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters < 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'put_wpgm' Shortcode
Slug
wp-google-maps
Published
2014-10-15
Title
WP Google Maps 6.0.26 - Cross Site Scripting (XSS)