WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-google-maps
Published
2026-07-13
Title
WP Go Maps < 10.1.04 - Unauthenticated SQL Injection via Markers REST filter
Slug
wp-google-maps-integration
Published
2026-05-11
Title
WP Google Maps Integration <= 1.2 - Reflected Cross-Site Scripting via 'page' Parameter
Slug
wp-google-maps-pro
Published
2021-06-15
Title
WP Google Maps Pro < 8.1.12 - Multiple Admin+ Stored Cross-Site Scripting
Slug
wp-google-maps-pro
Published
2026-07-10
Title
WP Google Maps Pro < 10.1.03 - Unauthenticated Stored Cross-Site Scripting
Slug
wp-google-my-business-auto-publish
Published
2022-12-29
Title
WP Google My Business Auto Publish < 3.4 - Contributor+ Stored XSS via Shortcode
Slug
wp-google-my-business-auto-publish
Published
2023-11-02
Title
WP Google My Business Auto Publish < 3.8 - Multiple CSRF
Slug
wp-google-places-review-slider
Published
2019-10-31
Title
WP Google Review Slider <= 6.1 - Authenticated SQL Injection
Slug
wp-google-places-review-slider
Published
2022-12-02
Title
WP Google Review Slider < 11.6 - Admin+ Stored XSS
Slug
wp-google-places-review-slider
Published
2023-01-23
Title
WP Google Review Slider < 11.8 - Subscriber+ SQLi
Slug
wp-google-places-review-slider
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wp-google-places-review-slider
Published
2024-04-05
Title
WP Google Review Slider < 13.6 - Admin+ Stored XSS
Slug
wp-google-places-review-slider
Published
2024-11-05
Title
WP Google Review Slider < 15.6 - Admin+ Stored XSS
Slug
wp-google-places-review-slider
Published
2025-03-27
Title
WP Google Review Slider < 16.1 - Cross-Site Request Forgery to SQL Injection
Slug
wp-google-places-review-slider
Published
2025-11-14
Title
Google Review Slider < 17.6 - Missing Authorization
Slug
wp-google-places-review-slider
Published
2026-06-01
Title
WP Google Review Slider < 18.1 - Unauthenticated Stored Cross-Site Scripting
Slug
wp-google-places-review-slider
Published
2026-06-30
Title
WP Google Review Slider < 18.2 - Reflected Cross-Site Scripting via 'place' Parameter
Slug
wp-google-street-view
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-google-street-view
Published
2025-01-23
Title
WP Google Street View (with 360° virtual tour) & Google maps + Local SEO < 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-google-street-view
Published
2025-03-27
Title
WP Google Street View < 1.1.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
wp-google-street-view
Published
2026-01-08
Title
WP Google Street View (with 360° virtual tour) & Google maps + Local SEO < 1.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wpgsv_map' Shortcode
Slug
wp-google-street-view-shortcode
Published
2025-11-20
Title
Shortcode for Google Street View <= 0.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
wp-google-tag-manager
Published
2023-02-27
Title
WP Google Tag Manager <= 1.1 - Cross-Site Request Forgery (CSRF)
Slug
wp-gotowebinar
Published
2023-10-24
Title
WP GoToWebinar < 14.46 - Admin+ Stored XSS
Slug
wp-gotowebinar
Published
2024-04-22
Title
WP GoToWebinar < 15.1 - Missing Authorization
Slug
wp-gotowebinar
Published
2024-07-11
Title
WP GoToWebinar < 15.7 - Missing Authorization