WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-google-map-gold
Published
2025-04-17
Title
Advanced Google Maps < 5.8.5 - Missing Authorization
Slug
wp-google-map-gold
Published
2026-05-25
Title
Advanced Google Maps < 6.1.1 - Unauthenticated Administrator Account Creation
Slug
wp-google-map-plugin
Published
2015-08-20
Title
WP Google Map Plugin < 3.0.0 - CSRF to Authenticated Cross-Site Scripting (XSS)
Slug
wp-google-map-plugin
Published
2018-04-27
Title
WP Google Map < 4.0.4 - XSS
Slug
wp-google-map-plugin
Published
2016-07-27
Title
WP Google Map Plugin < 3.1.2 - XSS
Slug
wp-google-map-plugin
Published
2015-04-24
Title
WP Google Map Plugin < 2.3.7 - XSS
Slug
wp-google-map-plugin
Published
2015-08-21
Title
WP Google Map Plugin < 2.3.10 - Multiple CSRF
Slug
wp-google-map-plugin
Published
2019-09-19
Title
WP Google Map Plugin < 4.1.0 - CSRF to Unauthenticated PHP Object Injection
Slug
wp-google-map-plugin
Published
2020-11-25
Title
WP Google Map Plugin < 4.1.5 - Authenticated SQL Injection
Slug
wp-google-map-plugin
Published
2023-01-20
Title
WP Google Map < 4.4.0 - Editor+ Stored XSS
Slug
wp-google-map-plugin
Published
2022-02-22
Title
WP Google Map < 4.2.4 - Marker Category/Map Deletion via CSRF
Slug
wp-google-map-plugin
Published
2022-03-13
Title
WP Google Map < 4.4.3 - Category/Location/Map Deletion via CSRF
Slug
wp-google-map-plugin
Published
2024-06-28
Title
WordPress Plugin for Google Maps – WP MAPS < 4.6.2 - Authenticated (Contributor+) SQL Injection
Slug
wp-google-map-plugin
Published
2025-04-10
Title
WP Maps < 4.7.2 - Admin+ Stored XSS
Slug
wp-google-map-plugin
Published
2025-04-10
Title
WP Maps < 4.7.2 - Admin+ Stored XSS
Slug
wp-google-map-plugin
Published
2025-04-10
Title
WP Maps < 4.7.2 - Admin+ Stored XSS
Slug
wp-google-map-plugin
Published
2025-11-02
Title
Maps < 4.8.7 - Authenticated (Administrator+) PHP Object Injection
Slug
wp-google-map-plugin
Published
2026-02-16
Title
WP Maps < 4.8.7 - Subscriber+ Limited Local File Inclusion
Slug
wp-google-map-plugin
Published
2026-03-10
Title
WP Maps < 4.9.2 - Unauthenticated SQL Injection via 'location_id' Parameter
Slug
wp-google-map-plugin
Published
2026-03-22
Title
WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters < 4.9.2 - Unauthenticated SQL Injection via 'orderby' Parameter
Slug
wp-google-map-plugin
Published
2026-04-08
Title
WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters < 4.9.2 - Unauthenticated SQL Injection
Slug
wp-google-map-plugin
Published
2026-04-15
Title
WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters < 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'put_wpgm' Shortcode
Slug
wp-google-map-plugin
Published
2026-04-27
Title
WP Maps < 4.9.3 - Subscriber+ Local File Inclusion
Slug
wp-google-map-plugin
Published
2026-06-05
Title
WP Maps < 4.9.5 - Authenticated (Admin+) Stored Cross-Site Scripting via 'location_messages' Parameter
Slug
wp-google-maps
Published
2014-10-15
Title
WP Google Maps 6.0.26 - Cross Site Scripting (XSS)